Static task
static1
Behavioral task
behavioral1
Sample
fa4ff8ff2af898f02a010cbe23165b966828bd324c1676c5ae9a502bbfa94d37.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
fa4ff8ff2af898f02a010cbe23165b966828bd324c1676c5ae9a502bbfa94d37.exe
Resource
win10v2004-20230915-en
General
-
Target
fa4ff8ff2af898f02a010cbe23165b966828bd324c1676c5ae9a502bbfa94d37
-
Size
15.2MB
-
MD5
385593831f8c586b079fb4462364c0ad
-
SHA1
454e70d73e67d402549bfa257b251e1504efbe2c
-
SHA256
fa4ff8ff2af898f02a010cbe23165b966828bd324c1676c5ae9a502bbfa94d37
-
SHA512
b797413c56e3cbfecc393b25d88a1fa7f998611a5043be60045827352b5460c92cd508b42f2c1bd165f5c16b98c20e52c18c4ef5327359faf68ff273275c5d10
-
SSDEEP
196608:CkzbYrllmyl1BLelbai5HEQ6hLPT7CelCwup5Mm8rO4Dq9nnvwcadJ:kllRPZe2jhLL3ljOJ9nvDi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa4ff8ff2af898f02a010cbe23165b966828bd324c1676c5ae9a502bbfa94d37
Files
-
fa4ff8ff2af898f02a010cbe23165b966828bd324c1676c5ae9a502bbfa94d37.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 960KB - Virtual size: 959KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13.8MB - Virtual size: 13.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 327KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 300KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ