Static task
static1
Behavioral task
behavioral1
Sample
fcaab051842b73ef95d22944c058ece481c72eb06645b4049502b867f7eba8ad.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
fcaab051842b73ef95d22944c058ece481c72eb06645b4049502b867f7eba8ad.exe
Resource
win10v2004-20230831-en
General
-
Target
fcaab051842b73ef95d22944c058ece481c72eb06645b4049502b867f7eba8ad
-
Size
4.6MB
-
MD5
c4826fe04f07dcf85d0e2f865125f80b
-
SHA1
677d5b0ff7f0234a523b346a45a1c2983d79761e
-
SHA256
fcaab051842b73ef95d22944c058ece481c72eb06645b4049502b867f7eba8ad
-
SHA512
1f1e30da34b03dab517cdbc0ac1338b9a922d276a5b67229eb5412c102d1c7914619c46000a71308d019f0f1eae8d125aa7d1b1c246fb915b50def23399b7be8
-
SSDEEP
24576:yxVKoZT49iCB4V9zZ14BORr4xkFHr2bFJTN04QuT:y/TpZBr4yWBT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcaab051842b73ef95d22944c058ece481c72eb06645b4049502b867f7eba8ad
Files
-
fcaab051842b73ef95d22944c058ece481c72eb06645b4049502b867f7eba8ad.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4.5MB - Virtual size: 25.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE