Static task
static1
Behavioral task
behavioral1
Sample
fb8d28500dad502d87856361b4a4156a217384664ad39e93bd5a197b84dff123.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
fb8d28500dad502d87856361b4a4156a217384664ad39e93bd5a197b84dff123.exe
Resource
win10v2004-20230915-en
General
-
Target
fb8d28500dad502d87856361b4a4156a217384664ad39e93bd5a197b84dff123
-
Size
3.9MB
-
MD5
77f2b2d41d07bac0f0ee557bf4fbc322
-
SHA1
afbe6828c3b5da8d4b5d86c1f2600f8029cc2301
-
SHA256
fb8d28500dad502d87856361b4a4156a217384664ad39e93bd5a197b84dff123
-
SHA512
a0e491bcbc4a76d1f79682ecebb7461c12b739ac60d9ff7e162e46c2ece0cba0f781beafabbc46528e2dcc7bd10cfde83fb0167d3b3bd4f143b20394e45154be
-
SSDEEP
98304:rJyq4yevxZUbR2zEysXbMU7Vujy35IveSJ9wbf:rJ6yep8vTu0So
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb8d28500dad502d87856361b4a4156a217384664ad39e93bd5a197b84dff123
Files
-
fb8d28500dad502d87856361b4a4156a217384664ad39e93bd5a197b84dff123.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE