Static task
static1
Behavioral task
behavioral1
Sample
IMG_2347849.JPG.www.facebook.com.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
IMG_2347849.JPG.www.facebook.com.exe
Resource
win10v2004-20231215-en
General
-
Target
2ec110837a629f6750543a795cebb248
-
Size
82KB
-
MD5
2ec110837a629f6750543a795cebb248
-
SHA1
75f43c2875484d969c2132089ce7697f1ce62eb7
-
SHA256
5aa6f2d75c746f72d0e00496679e6d7e8a4efac4b7dd48b99c0fd9439433f5ea
-
SHA512
57d86756c12867dc53182d037bc8ccf391ff1c5bf2b7900fdb5594a6095925f35dd822590dc5d9ca1fb7347e985bf78e273cbb7e4ce8c15ad5bd0393d7f495d4
-
SSDEEP
1536:0dd/DC+HFlfGPZvkE3yDcqqMO2h/5gNFQRem1xmVmwxTOhaOD:CDC+Svr36cxW+NK4wIVTihBD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/IMG_2347849.JPG.www.facebook.com.exe
Files
-
2ec110837a629f6750543a795cebb248.zip
-
IMG_2347849.JPG.www.facebook.com.exe.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.test Size: - Virtual size: 936KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ