Static task
static1
Behavioral task
behavioral1
Sample
fb_payload_1.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
fb_payload_1.exe
Resource
win10v2004-20230703-en
General
-
Target
fb_payload_1.bin
-
Size
191KB
-
MD5
b8adc31bc256122722259d817760f63f
-
SHA1
e880ca63ddbbdef6430706293d9af9c96d0a9a01
-
SHA256
076ff528aaf5e9cec7baccfdf8b619a58df911c9b791bfadc7da828255965cc8
-
SHA512
3cf671d7ede7971d4fce4b49b542cbd475f9e069e075cbdcf4648dd18008b357db0b8b76a73c0024548d21c729358002c1b67d9eac97d93b0223f354fe313198
-
SSDEEP
3072:+2OUzVN+PA6RoGAOcvGWBqbvI7Uh83vJsrXC5v0lVOEguHbAQMS7AGbD:BP/EDqs07B/yrXCGOLu7AQFBv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb_payload_1.bin
Files
-
fb_payload_1.bin.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ