Static task
static1
Behavioral task
behavioral1
Sample
fadb26ce701b012a615ac963b87f9d19.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fadb26ce701b012a615ac963b87f9d19.exe
Resource
win10v2004-20231215-en
General
-
Target
fadb26ce701b012a615ac963b87f9d19
-
Size
3.6MB
-
MD5
fadb26ce701b012a615ac963b87f9d19
-
SHA1
c9b7a1b2ec962bab8997f3907983eee028578bc7
-
SHA256
4df32300edc1da47fcfa25dbe3c92ce941f2bf01c9025956275a926209b05674
-
SHA512
daa8548202b44ec071bd3534fef31d9d62f69dbc4cdb7969e709f584df4e6ea30a376453e71cb0ccc7825c7789855f099ede7adee29c0fb4bebc58104c364712
-
SSDEEP
24576:sPQr5FwdBNY8VMCtIZJntOFmMlMqPilaiS4Yr6ugPngPfjv9tLF2cH8g/2sg7va7:sPiY18NlaVeuHFOc+ilW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fadb26ce701b012a615ac963b87f9d19
Files
-
fadb26ce701b012a615ac963b87f9d19.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE