Static task
static1
Behavioral task
behavioral1
Sample
fb811dd7ce8397d007ee46e61737209020b8b12a1133f43f9a944771d4194087.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
fb811dd7ce8397d007ee46e61737209020b8b12a1133f43f9a944771d4194087.exe
Resource
win10v2004-20230915-en
General
-
Target
fb811dd7ce8397d007ee46e61737209020b8b12a1133f43f9a944771d4194087
-
Size
26KB
-
MD5
15aea70c3b149fec712d8092ba0c11b3
-
SHA1
49c0543ece27ff1242ae019507a78d9e58d87027
-
SHA256
fb811dd7ce8397d007ee46e61737209020b8b12a1133f43f9a944771d4194087
-
SHA512
9749efb386a2984e567a14b12fc32656d7ee4c543f75a19ce471a87604ea2de5140e111bffa16b5416cd458900173494914bd39d3c0ab8186e5ca4136470d475
-
SSDEEP
768:YJ1ODKAaDMG8H92RwZNQSwcfymNBg+g61GoL:YffgLdQAQfcfymN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb811dd7ce8397d007ee46e61737209020b8b12a1133f43f9a944771d4194087
Files
-
fb811dd7ce8397d007ee46e61737209020b8b12a1133f43f9a944771d4194087.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE