Static task
static1
Behavioral task
behavioral1
Sample
fed1ab5970467fbceb2b3ad1beb11720.exe
Resource
win7-20231025-en
General
-
Target
fed1ab5970467fbceb2b3ad1beb11720.bin
-
Size
102KB
-
MD5
fed1ab5970467fbceb2b3ad1beb11720
-
SHA1
6f2a2a2ddbb4f54e5349d46419df7eb404db4064
-
SHA256
21f0460c446e7548a83bdf7565c6e781073735231b0a3854d85265c0cbcf4600
-
SHA512
9db40e0b0dfcb99e5ba680276e357c6fa2f721d2348927468d9a7b7f205f0f775a6893394f8eee88e4a3259accb68ae80913c1654cf5946fd5d396024e4d98d1
-
SSDEEP
1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxND+3T4+mzv7oEzNbyFE7Yc9GUw0Km:ymb3NkkiQ3mdBjF+3TYzvTxh7YKmuP7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fed1ab5970467fbceb2b3ad1beb11720.bin
Files
-
fed1ab5970467fbceb2b3ad1beb11720.bin.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ