Static task
static1
Behavioral task
behavioral1
Sample
fcf980f3f14f9e5be7d37e7e5c04d666.exe
Resource
win7-20231129-en
General
-
Target
fcf980f3f14f9e5be7d37e7e5c04d666
-
Size
21.7MB
-
MD5
fcf980f3f14f9e5be7d37e7e5c04d666
-
SHA1
d831b442a88a34be8801ce35bfc47b6b14376488
-
SHA256
aab2c90b50993e55819962592c1960be3a877900938f2f0dbfe72853dd15749c
-
SHA512
314cd2d962b87a47ff5ae04d7e772b3f57bc83c7fc2c5536e43215ac4230e919c75bd60d178588b1abe8e9c388f95b430e6c9bd6ed652c47ea59530ed597962c
-
SSDEEP
393216:h40lEvoEwkVuxpn19T39NgEUy5IPbppuF+gdKmYJAA7BvPDDvwfq7Gj0gttZ:h40egEDVuxpnvZSEUy+P9zZmaASPDD4H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcf980f3f14f9e5be7d37e7e5c04d666
Files
-
fcf980f3f14f9e5be7d37e7e5c04d666.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 21.7MB - Virtual size: 21.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ