Static task
static1
Behavioral task
behavioral1
Sample
fa5f271a193141810b946e36a2d73a70.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fa5f271a193141810b946e36a2d73a70.exe
Resource
win10v2004-20231215-en
General
-
Target
fa5f271a193141810b946e36a2d73a70
-
Size
2KB
-
MD5
fa5f271a193141810b946e36a2d73a70
-
SHA1
3286cb81936f639222547f8e1bd8fe4426c96501
-
SHA256
15f323b57bf27beab99c74ae98ed96b8c9256f5e53b1fcb1def3f2848d01ec10
-
SHA512
1716842522e4fb9a829c6a514e13b7edb0da82c8edabfced8beca69f2913ddbe294d399f94cde690e6c91967de6ce323b367e712c081ec7a1291b60d8aadf89f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa5f271a193141810b946e36a2d73a70
Files
-
fa5f271a193141810b946e36a2d73a70.exe windows:4 windows x86 arch:x86
4d971e8ad2e128430e1d9b8668ec7686
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
ExitProcess
GetModuleHandleA
Sections
.text Size: 512B - Virtual size: 331B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 242B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ