Static task
static1
Behavioral task
behavioral1
Sample
FB-108N & FB-108NK 詢價 - 田勤.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
FB-108N & FB-108NK 詢價 - 田勤.exe
Resource
win10v2004-20230703-en
General
-
Target
d158b9c86d15735ad680bb854a398c63ad9ff4ae7bee57ac1c495cd46bcedb57
-
Size
462KB
-
MD5
11b67b094982ad3471970133de1fc3a5
-
SHA1
c8b8fa589caedea89e53494df77dc54a7e2876e0
-
SHA256
d158b9c86d15735ad680bb854a398c63ad9ff4ae7bee57ac1c495cd46bcedb57
-
SHA512
0202b8f7b182d5e050ed6de6290d281ca5444133f45715c55dc249e91e22860c4f54de9c3fec06490814bd27a9edd3bdbe45425e9034930c606bfa74bc1cf852
-
SSDEEP
12288:U+0zNPvEMgHfLh5Xyqa2C2v+ia/7eE4yA2fLmt1DrP/TsgRU7oavA:UPzNHXg/Lh5XyWGisKUAEG1Dzj04
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/FB-108N & FB-108NK 詢價 - 田勤.exe
Files
-
d158b9c86d15735ad680bb854a398c63ad9ff4ae7bee57ac1c495cd46bcedb57.zip
-
FB-108N & FB-108NK 詢價 - 田勤.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 474KB - Virtual size: 473KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ