Static task
static1
Behavioral task
behavioral1
Sample
fa5f63c45db651204cc6d413c25ddc5e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fa5f63c45db651204cc6d413c25ddc5e.exe
Resource
win10v2004-20231215-en
General
-
Target
fa5f63c45db651204cc6d413c25ddc5e
-
Size
5KB
-
MD5
fa5f63c45db651204cc6d413c25ddc5e
-
SHA1
6badf5a5650e3ade5ede77f81c2866ce2e7f1f12
-
SHA256
330ebfdf11b7255d434e54dad1d8d16a26d6fad2d35269a29462efeec790b6f0
-
SHA512
400dff0709a8e383ccb0e7316e883f1d4d7ec7d2689775460b9dd16f34944981aeb6f4c50710ccc28bf594d1b36aa38fd2fc5de6cd2dd02469d85d1935fc7b76
-
SSDEEP
48:6wPWp2WR333kGWx6LVxajmJzpGZiBcgg8kF6PTDvXo6qZWD4T3lKn4LlTqqXSfbi:dOPHPWxujabQRbDvX/CWYgn40zNt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa5f63c45db651204cc6d413c25ddc5e
Files
-
fa5f63c45db651204cc6d413c25ddc5e.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ