Static task
static1
Behavioral task
behavioral1
Sample
fabf44e49dfc23cccabdeee90ed8ba283069d994dca60dd26bf636c89176410a.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
fabf44e49dfc23cccabdeee90ed8ba283069d994dca60dd26bf636c89176410a.exe
Resource
win10v2004-20230915-en
General
-
Target
fabf44e49dfc23cccabdeee90ed8ba283069d994dca60dd26bf636c89176410a
-
Size
261KB
-
MD5
f6abd7df0af2f73f890d368249907612
-
SHA1
1138a6a004ed6d7ac524b0c276e6733ec9765f6a
-
SHA256
fabf44e49dfc23cccabdeee90ed8ba283069d994dca60dd26bf636c89176410a
-
SHA512
ebf3a7186339b1faec46d6b686e16343728c06bd4ff4bbcad6b9c69f53cce798f3847d4a4d10a1620660e089bbc3404c3d02f44e7b033773310fcd8a2fba0c20
-
SSDEEP
3072:EzJ2//CJiZdmpFvWtapmvEjbpF8kriqll7YYWZLBvRv:EzJ2iJKdmpFQ65hekl7YhZLBv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fabf44e49dfc23cccabdeee90ed8ba283069d994dca60dd26bf636c89176410a
Files
-
fabf44e49dfc23cccabdeee90ed8ba283069d994dca60dd26bf636c89176410a.exe windows:4 windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ