fabookie | 5bc0f91a9e1e202238882a319c905c31[.]bin

General

Target
5bc0f91a9e1e202238882a319c905c31.bin
Size 1.2MB
Sample230926-bqqsmsed83
SHA256 77cf58971898eb2b7c8adc85044b5dd8d5426ae95e1be26a2585c5fee59f473e
MD5 5bc0f91a9e1e202238882a319c905c31
SHA1 d968cafb65a6b51bbc242c11e8133c4ac56456ec
SHA512 501b25888d1e3e52766c0e0faf4382e26b69d109d8ff51dcb299248a5dd63ff86a81728c99c58758779b014665e388ab2b583ea3dc76d9c160fab827c1d2fb80
SSDEEP 24576:3C7CI9TZDEWk1wCy0zaG9cQAX1ftxmbfYQJZKbTl:7I99DEWVtQAXZmn0/
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

fabookie

Detect Fabookie payload 1 IoCs

resource	yara_rule
sample	family_fabookie

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bc0f91a9e1e202238882a319c905c31.bin

SHA256 77cf58971898eb2b7c8adc85044b5dd8d5426ae95e1be26a2585c5fee59f473e
MD5 5bc0f91a9e1e202238882a319c905c31
SHA1 d968cafb65a6b51bbc242c11e8133c4ac56456ec
SHA512 501b25888d1e3e52766c0e0faf4382e26b69d109d8ff51dcb299248a5dd63ff86a81728c99c58758779b014665e388ab2b583ea3dc76d9c160fab827c1d2fb80
SSDEEP 24576:3C7CI9TZDEWk1wCy0zaG9cQAX1ftxmbfYQJZKbTl:7I99DEWVtQAXZmn0/
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

0

Major OS version

6

Entry point

566056

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths