Static task
static1
Behavioral task
behavioral1
Sample
fcd91a8ae48881baa6888d89ca2e7beb.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fcd91a8ae48881baa6888d89ca2e7beb.exe
Resource
win10v2004-20231215-en
General
-
Target
fcd91a8ae48881baa6888d89ca2e7beb
-
Size
184KB
-
MD5
fcd91a8ae48881baa6888d89ca2e7beb
-
SHA1
3674c098f4333fa6d741e797d847dab81650b2b4
-
SHA256
49740fdfc884bbb6ce29ee5cdb010cd1b1bcd66d20de9a872d097e28f826de47
-
SHA512
4c715faea4af813195cda5194f8ecb6ea50eaf4eefb6304e37f32e43c1933bf21143461b25295b5a101d70b4387a0e12689601653497bc0601881f2bb47b598a
-
SSDEEP
3072:ohijonmAJuFmggjSMFpVl8SYQOlWtQilWRSxcePNaylY3pFi:ohCo7+mgDMHVl8j+aPylY3pF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcd91a8ae48881baa6888d89ca2e7beb
Files
-
fcd91a8ae48881baa6888d89ca2e7beb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ