Static task
static1
Behavioral task
behavioral1
Sample
fbdd910e4460d9fd4b5ce52ac15923aa5373715fb85e6ce293117719b4a38a4f.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
fbdd910e4460d9fd4b5ce52ac15923aa5373715fb85e6ce293117719b4a38a4f.exe
Resource
win10v2004-20230915-en
General
-
Target
fbdd910e4460d9fd4b5ce52ac15923aa5373715fb85e6ce293117719b4a38a4f
-
Size
3.0MB
-
MD5
2a6247a861922a5f8443600b38e052c2
-
SHA1
4d8f7e815fab4d690020b9d304fc42a5135966b0
-
SHA256
fbdd910e4460d9fd4b5ce52ac15923aa5373715fb85e6ce293117719b4a38a4f
-
SHA512
50c4d2a19888cc95a0020845d7e391802c3c55844e39138f0e57c8cb7bc5f20c8c2b39c3294ebd972a0a5e9f3d356ecd04a786b95527cfbcb5027c2f9bae2dfe
-
SSDEEP
49152:XAGnXtaVEzJaozVl8eiu75kqpTad69Fd5xhPlQL66Es7CncF3dtaSCrL:Nn9aVE9JvgutVId69FbDdQL6wt3dYr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbdd910e4460d9fd4b5ce52ac15923aa5373715fb85e6ce293117719b4a38a4f
Files
-
fbdd910e4460d9fd4b5ce52ac15923aa5373715fb85e6ce293117719b4a38a4f.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 1.7MB
IMAGE_SCN_MEM_READ
VProtect Size: 616KB - Virtual size: 616KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 2.3MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
VProtect Size: 12KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ