Static task
static1
Behavioral task
behavioral1
Sample
fc3c79899a61e962261cfb275f2feed4c28aaf5ab564a2178d26b208a8c2ce9c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
fc3c79899a61e962261cfb275f2feed4c28aaf5ab564a2178d26b208a8c2ce9c.exe
Resource
win10v2004-20230915-en
General
-
Target
fc3c79899a61e962261cfb275f2feed4c28aaf5ab564a2178d26b208a8c2ce9c
-
Size
13.1MB
-
MD5
aa812271934aba5f333a288070b9eee0
-
SHA1
93c00e26773d15de4c7f93f567fc3138de525741
-
SHA256
fc3c79899a61e962261cfb275f2feed4c28aaf5ab564a2178d26b208a8c2ce9c
-
SHA512
a6127d9f11d46303326a293e88f6515b5a83f3e448a01269c7bb5fb27233d565f17c2c660079c63372899b6d0ac40b67a1c9ef8a93ac6f5e71c32f3662eda9f6
-
SSDEEP
98304:oPD+bdaK3Ilkp36vF1FXbkgrzDgiCOIuqXY1HkabtIiz3Cjd6SMViCjOvB1Ht5G5:oP6bdt3+zhbkgHDx1H4iz3Cjd6SMM+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc3c79899a61e962261cfb275f2feed4c28aaf5ab564a2178d26b208a8c2ce9c
Files
-
fc3c79899a61e962261cfb275f2feed4c28aaf5ab564a2178d26b208a8c2ce9c.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 13.0MB - Virtual size: 13.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ