Static task
static1
Behavioral task
behavioral1
Sample
fdba628cedf8224e48b5b6a9f10b063071b23debe953911d8ca143a850045910.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
fdba628cedf8224e48b5b6a9f10b063071b23debe953911d8ca143a850045910.exe
Resource
win10v2004-20230703-en
General
-
Target
fdba628cedf8224e48b5b6a9f10b063071b23debe953911d8ca143a850045910
-
Size
712KB
-
MD5
e6917a67d681855f48517c52667c7cab
-
SHA1
278fa39048a0edcfe54f1a75618e73679ff6734d
-
SHA256
fdba628cedf8224e48b5b6a9f10b063071b23debe953911d8ca143a850045910
-
SHA512
46809f2e4b3797427a771ceda5492e2e288174cc42c194be8ed136a63f050e400c779bddfaeb4edf01782244adc1b59384f8fefacffc0c35aeed7571dd331c63
-
SSDEEP
12288:j+hHpSYHUKtcMISGXRY29pvywdAZAz9/VrVEo9xiVZguE4m7PHw:appSEUKNbGXz9owdACz9/VxJxyquE4g4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdba628cedf8224e48b5b6a9f10b063071b23debe953911d8ca143a850045910
Files
-
fdba628cedf8224e48b5b6a9f10b063071b23debe953911d8ca143a850045910.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 642KB - Virtual size: 642KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ