Static task
static1
Behavioral task
behavioral1
Sample
fa4e2b81d6c6ed907eaca9950026c8da.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fa4e2b81d6c6ed907eaca9950026c8da.exe
Resource
win10v2004-20231215-en
General
-
Target
fa4e2b81d6c6ed907eaca9950026c8da
-
Size
357KB
-
MD5
fa4e2b81d6c6ed907eaca9950026c8da
-
SHA1
f1a54a6896f65d2e919dd8acc852e498faf278d6
-
SHA256
e632a49a559330c5d9dcaafb38bd0aafcb0e61695c8866625d8aefef103ae0a5
-
SHA512
9318102cfe0d57c4d486c4d18280ef2cd7600f8ba467276dfe74a7642f17dea8412e3bc2ec537fa3796d2cd44210e6c648120c73044a67c3f7185368e27a34a4
-
SSDEEP
6144:Z4c37W44/kKYkTzlGz9gOUb2GBqoOkR6loMnKXAON1GvximETKXEo5yD0sD1b0kH:y27Wp/kK/lGRgOUqmq9kR6lhKXf1oxiB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa4e2b81d6c6ed907eaca9950026c8da
Files
-
fa4e2b81d6c6ed907eaca9950026c8da.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 43KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 286KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE