Static task
static1
Behavioral task
behavioral1
Sample
fa31ad6f4d38a6ea9dd0745c1faaf323.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fa31ad6f4d38a6ea9dd0745c1faaf323.exe
Resource
win10v2004-20231222-en
General
-
Target
fa31ad6f4d38a6ea9dd0745c1faaf323
-
Size
104KB
-
MD5
fa31ad6f4d38a6ea9dd0745c1faaf323
-
SHA1
edd28f2b39a2f761cb58f122dbc4316af38d1d07
-
SHA256
c61b09d4c33772350645dac51c5a4d43d6b83fad58fb84da32b4c1567540ad8b
-
SHA512
ce608d3b76289a38a6cca592602a4f283994829f16c2a812732342765b115818abb5fe1d11eb029ea91c0685a5c3633da21c41fd67be18f5ac0e7cd4ef1eb4ff
-
SSDEEP
1536:vC7Uz+4A7mDoxMu1w4uxm84RdUfkVJDjyE/9ASyzK7D1I32QXzLJOkmoh2rNceqn:6IrLDiw4Em84PUe2E/9Az829zYcsKf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa31ad6f4d38a6ea9dd0745c1faaf323
Files
-
fa31ad6f4d38a6ea9dd0745c1faaf323.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 36KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 54KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lif Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE