Static task
static1
Behavioral task
behavioral1
Sample
FB-108N & FB-108NK 詢價 - 田勤.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
FB-108N & FB-108NK 詢價 - 田勤.exe
Resource
win10v2004-20230703-en
General
-
Target
a1dc8511ccee8d57aad07e0a44f568bfacac9255918f8098a5e0fca75a68c44a
-
Size
488KB
-
MD5
d609c6a389eebd86fe1530276f76d73e
-
SHA1
18fb08cc40fe7bfe6163e2eb3ac2dd8c11fec49b
-
SHA256
a1dc8511ccee8d57aad07e0a44f568bfacac9255918f8098a5e0fca75a68c44a
-
SHA512
1d5935d484e372847de582a4ef7e4c0ae6fd58a78a229bb08d941a928b6ce39672f4c9ddd0771a7f48fd000f4001c438bd9e18f41821c6d881c83ae4abddb771
-
SSDEEP
12288:oAGoRDwQjzkRg4id7756lbx7vW0MPhvZkTtoB0cu+oHwkpfK:o1oXkRnid7d6lBO0MPTkTtoivQqK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/FB-108N & FB-108NK 詢價 - 田勤.exe
Files
-
a1dc8511ccee8d57aad07e0a44f568bfacac9255918f8098a5e0fca75a68c44a.zip
-
FB-108N & FB-108NK 詢價 - 田勤.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 502KB - Virtual size: 501KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ