Static task
static1
Behavioral task
behavioral1
Sample
fa3396759233ea60dd99e11c793f2b517e426a02a0949282475b54ed1d3d57ed.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
fa3396759233ea60dd99e11c793f2b517e426a02a0949282475b54ed1d3d57ed.exe
Resource
win10v2004-20230915-en
General
-
Target
fa3396759233ea60dd99e11c793f2b517e426a02a0949282475b54ed1d3d57ed
-
Size
76KB
-
MD5
f843cc17b30ebfc335ad4b3172662aba
-
SHA1
073bbca95b60951f8be649a787c324dd5ae0c1a1
-
SHA256
fa3396759233ea60dd99e11c793f2b517e426a02a0949282475b54ed1d3d57ed
-
SHA512
02af818eaa8eef1188d14f7d72d2f448cad83444bb2c1231e2083ba79e28333f6888a66240b5fbaed80cb3f6a8ca8683edfd555f17bbbd6ff910bd36c30a6b92
-
SSDEEP
768:fE3C2g0SRumc+hy30JT/X+yFfDg6ezjJ319GKHRnojTI6wVHNGEzc:xPumc+h6ytfD4zR6c7zc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa3396759233ea60dd99e11c793f2b517e426a02a0949282475b54ed1d3d57ed
Files
-
fa3396759233ea60dd99e11c793f2b517e426a02a0949282475b54ed1d3d57ed.exe windows:5 windows x64
b3dd870b7c3aaa07be67f896ad2b1aa2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ws2_32
GetNameInfoW
FreeAddrInfoW
GetAddrInfoW
WSAAddressToStringW
WSACleanup
WSAStartup
iphlpapi
IcmpSendEcho2
IcmpCloseHandle
Icmp6CreateFile
IcmpCreateFile
Icmp6SendEcho2
msvcrt
__set_app_type
__lconv_init
signal
_wcmdln
__winitenv
_initterm
_fpreset
_cexit
__wgetmainargs
_amsg_exit
__setusermatherr
_vsnwprintf
wcsncpy
wcslen
memset
memcpy
wcstoul
malloc
free
exit
kernel32
GetModuleHandleA
LoadLibraryW
DeleteCriticalSection
TlsGetValue
GetTickCount
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
SetUnhandledExceptionFilter
GetStartupInfoW
GetConsoleMode
LockResource
LoadResource
GetProcAddress
GetFileType
FindResourceExW
WriteConsoleW
GetConsoleOutputCP
WideCharToMultiByte
WriteFile
SetLastError
LeaveCriticalSection
HeapFree
HeapAlloc
GetProcessHeap
Sleep
EnterCriticalSection
InitializeCriticalSection
GetLastError
GetStdHandle
SetConsoleCtrlHandler
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ