Static task
static1
Behavioral task
behavioral1
Sample
fb98d35d14a5f847a81efa903a837aa2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fb98d35d14a5f847a81efa903a837aa2.exe
Resource
win10v2004-20231222-en
General
-
Target
fb98d35d14a5f847a81efa903a837aa2
-
Size
1.6MB
-
MD5
fb98d35d14a5f847a81efa903a837aa2
-
SHA1
6a682d1d1750c77e4405820455e04ef5ef3e3374
-
SHA256
e224e3c5727004bc70742f3e14089df6af637fbe63d7c5b431ae9be98ba86b17
-
SHA512
e7aba87b893af72a0fb527c0176ce09c88f8ea0f74c56466f02eb596ffc4e536a5b1068977755e11aad42a32e95cc68e3390718aaa6e17cac5b536ebaf14240c
-
SSDEEP
24576:UuhaQyeZJ8NI8TyeZJ8NI8TyeZJ8NI8TyeZJ8NI8KRzVkUetVI5uY:bL8v8v8v8KrZuY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb98d35d14a5f847a81efa903a837aa2
Files
-
fb98d35d14a5f847a81efa903a837aa2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ