Static task
static1
Behavioral task
behavioral1
Sample
0FRVRFTI.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0FRVRFTI.exe
Resource
win10v2004-20230703-en
General
-
Target
0FRVRFTI.EXE
-
Size
38KB
-
MD5
258f6d2db61eaa82ff4ecf9bb6e2a707
-
SHA1
85739679c28f64569c1ec557395b115cdc6da8af
-
SHA256
3533d7d5ee0d77ff9f6871cf2bb10d3e232c154d40eb9def1015883ced932088
-
SHA512
d62a5cc453d5943662e6ec3739a348997c8caa337ebe911cc5dc1951e7fc6cc0a5e06dbcfb19925ab11878d78d4a29ed270faa003affdf51a41bb55dd73b90e7
-
SSDEEP
768:K5QPlYhHVmbqLnt/z7S4z+CRY1GrU1zozm1V6:KoluVmeh/zRqGEUsV6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0FRVRFTI.EXE
Files
-
0FRVRFTI.EXE.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ