Static task
static1
Behavioral task
behavioral1
Sample
fa934a96fdd382f70f29ad80375dbc2740ff9ad1ccfa635f7d6cf8bff3164024.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
fa934a96fdd382f70f29ad80375dbc2740ff9ad1ccfa635f7d6cf8bff3164024.exe
Resource
win10v2004-20230703-en
General
-
Target
fa934a96fdd382f70f29ad80375dbc2740ff9ad1ccfa635f7d6cf8bff3164024
-
Size
2.7MB
-
MD5
1488ad88a30fb22a5c0942c7efba9e5e
-
SHA1
b6b181f43a598c22890a33ea63e878e1fbfab14f
-
SHA256
fa934a96fdd382f70f29ad80375dbc2740ff9ad1ccfa635f7d6cf8bff3164024
-
SHA512
5a599bc5017eecf68a406207c53f09d7a1793b7f81116354f5f2b9bbba9be0cf1110d3c0841fab2ea0eca5f6b47ad5626f2e12fad0726f1d20760ee951a6c7de
-
SSDEEP
24576:AK5C8GqSHosFjDK8lgVEaec2oFT/Dg8fOQ:ASGKsFjDPGW0bi8G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa934a96fdd382f70f29ad80375dbc2740ff9ad1ccfa635f7d6cf8bff3164024
Files
-
fa934a96fdd382f70f29ad80375dbc2740ff9ad1ccfa635f7d6cf8bff3164024.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
TMbe Size: - Virtual size: 9.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
XB9i Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 282KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE