Static task
static1
Behavioral task
behavioral1
Sample
fed095a512380973869013e657b063fffa2f69474232161b1c48eb29e70ff24d.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
fed095a512380973869013e657b063fffa2f69474232161b1c48eb29e70ff24d.exe
Resource
win10v2004-20230824-en
General
-
Target
fed095a512380973869013e657b063fffa2f69474232161b1c48eb29e70ff24d
-
Size
2.3MB
-
MD5
a9b30eb8d197261e13dcbc916ea07c9e
-
SHA1
bd1f6ce00b9e355014c0c9d27d339c9b582020e6
-
SHA256
fed095a512380973869013e657b063fffa2f69474232161b1c48eb29e70ff24d
-
SHA512
6e417810b3fc2bb124197238f0e4cbea0cf375080b7fde73a82b8febb99bce6ba6e511257ab4b1cd033af15c53d632b5af0c996b6c6033cd39d163b772feb86a
-
SSDEEP
12288:xKj9xKjEpZBjpkVccndV4PhLuALi1krcdh2iuEi6T/Dg85JOJrte0WjoSK:gjDK8lgVEaec2oFT/Dg8fOJrm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fed095a512380973869013e657b063fffa2f69474232161b1c48eb29e70ff24d
Files
-
fed095a512380973869013e657b063fffa2f69474232161b1c48eb29e70ff24d.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
nolE Size: - Virtual size: 9.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
XWCM Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 282KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE