Static task
static1
Behavioral task
behavioral1
Sample
Bypass_Login_Fanka.exe
Resource
win10v2004-20231023-en
General
-
Target
Bypass_Login_Fanka.exe
-
Size
788KB
-
MD5
80a13c4aa853e51a1bfab481b195214b
-
SHA1
01b1cd6514f3268d0124f6b7ea46137ce270544f
-
SHA256
3248d5a501cc6cf60ace115d6086dc3f921a5ea6a4307d4c548160b51dc6d47c
-
SHA512
e5f3cec2cd4b2eb23434d9ca79ff7ed977cfb23d080b6e6dd41c00cd140e434bf42d2a5a7f11fd19dd01aa5b22037989f6ef27e8b1f38a3c4ea97ab8a9fed263
-
SSDEEP
12288:NuY5IdsW1MutrQmLDNvbhklJrvFR2rhICgMs5CWa/FOnpyjr:IY592SmLDN6lN9g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Bypass_Login_Fanka.exe
Files
-
Bypass_Login_Fanka.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 783KB - Virtual size: 783KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ