Static task
static1
Behavioral task
behavioral1
Sample
fbc45be44cf9c44f6e5d945d403f2b4f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fbc45be44cf9c44f6e5d945d403f2b4f.exe
Resource
win10v2004-20231215-en
General
-
Target
fbc45be44cf9c44f6e5d945d403f2b4f
-
Size
15KB
-
MD5
fbc45be44cf9c44f6e5d945d403f2b4f
-
SHA1
079a1ab0301c49dc0e4483f58c5c56f53a57665a
-
SHA256
3f6a20a544e277ad9efddca8c42ea4ad9861e9e270a51005f705d29ed91d48a4
-
SHA512
88a77255a6a29ea66aacb09b02f679e5a7f9e31bb6ea75408de51d852c4c28c4d90f8ba84cb6e1aee97b3e18a1d57b664073d404e92c7c92121291496b152dde
-
SSDEEP
384:UgQudButB/6CR+cp2uDEYBLoKYHaEdQUgFi5dsX:U4dwBnTp2uDERKY6EM2sX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbc45be44cf9c44f6e5d945d403f2b4f
Files
-
fbc45be44cf9c44f6e5d945d403f2b4f.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ