Static task
static1
Behavioral task
behavioral1
Sample
fdec386da63058475415d75ff5a0c1e94095cf3ca17ea25d542baf2d26f04fea.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
fdec386da63058475415d75ff5a0c1e94095cf3ca17ea25d542baf2d26f04fea.exe
Resource
win10v2004-20230915-en
General
-
Target
fdec386da63058475415d75ff5a0c1e94095cf3ca17ea25d542baf2d26f04fea
-
Size
10.7MB
-
MD5
3409a05b72ee9ba2c485e6e80f2867c4
-
SHA1
cef2ba8738891929f13ceb6356896ab9d312a4a4
-
SHA256
4a4528bdebe69115d62c79d808947f361315d0551763a67a645e6bc93c6a83db
-
SHA512
0e9c82fb2b9e59b51ec4d465f9a7948bdcdf8eb32b58f6e42c419017b5c9958b74458830530502b00397db97067c88d2c9a04f98522b645443386bd1080653bc
-
SSDEEP
196608:Ff6KgOtsPTw6uiXVFEQZ8vxRnnnwm3PiPVqignbZ6Xd1W6Hvr9NfQp6/X+t:d6Nss7weFI7nnG4V6t9Hi6fe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/fdec386da63058475415d75ff5a0c1e94095cf3ca17ea25d542baf2d26f04fea
Files
-
fdec386da63058475415d75ff5a0c1e94095cf3ca17ea25d542baf2d26f04fea.zip
-
fdec386da63058475415d75ff5a0c1e94095cf3ca17ea25d542baf2d26f04fea.exe windows:4 windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 11.5MB - Virtual size: 11.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ