Static task
static1
Behavioral task
behavioral1
Sample
fa8f00e7a4462eb1d7f302bb146e9a61.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
fa8f00e7a4462eb1d7f302bb146e9a61.exe
Resource
win10v2004-20230621-en
General
-
Target
fa8f00e7a4462eb1d7f302bb146e9a61.bin
-
Size
931KB
-
MD5
fa8f00e7a4462eb1d7f302bb146e9a61
-
SHA1
6de23802224a95e0fc820edd74f81b2fc7483185
-
SHA256
c4736f746eb26729b2b84d4b734f3fb701cab469987adce17a0e9ceb9ccbc3be
-
SHA512
dd151e7e0a253bbdab1082e01ce8739fd08b169a9299b491cc7b012abf689e6238e38e4bb01259b5c9d03635407c042fd2351dbdc3cae3df4e3d3885f57fafc4
-
SSDEEP
12288:rY78hwr+DX16Su3RBncwwK7bddty2Cyd1jJLrIcKyrZyTm:rTXNQ9chK7bdTyovB5pyTm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa8f00e7a4462eb1d7f302bb146e9a61.bin
Files
-
fa8f00e7a4462eb1d7f302bb146e9a61.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 928KB - Virtual size: 928KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ