Static task
static1
Behavioral task
behavioral1
Sample
fce214f1d568971c4e0af62b277d123c500537ab18a7e5d53ad6292126e5b9ec.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
fce214f1d568971c4e0af62b277d123c500537ab18a7e5d53ad6292126e5b9ec.exe
Resource
win10v2004-20231127-en
General
-
Target
fce214f1d568971c4e0af62b277d123c500537ab18a7e5d53ad6292126e5b9ec
-
Size
658KB
-
MD5
154214cc12d15e3de8a92e288f92d92a
-
SHA1
d211d0ebbb3b75267863f2c021e8b2bf2c9b32e8
-
SHA256
fce214f1d568971c4e0af62b277d123c500537ab18a7e5d53ad6292126e5b9ec
-
SHA512
b9409e204d69507695c162f3bc879bc7a5e475c7245d814fef9b29a573f69ea496289d0105122446981b0a5e83da788f30efae087b96d096f64a845c8dd71550
-
SSDEEP
12288:2faIyzC/HzgHgzZKzsoOk0eelcZxQ4YmIlzXk+BN5IiPd/B2GAJ3629UxO:2fb/HzjzZrofRA47IlzXXD5nd8xq2L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource fce214f1d568971c4e0af62b277d123c500537ab18a7e5d53ad6292126e5b9ec
Files
-
fce214f1d568971c4e0af62b277d123c500537ab18a7e5d53ad6292126e5b9ec.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 655KB - Virtual size: 655KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ