Static task
static1
Behavioral task
behavioral1
Sample
fa9c1403f25e58fcf4b61a5bb895404c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fa9c1403f25e58fcf4b61a5bb895404c.exe
Resource
win10v2004-20231215-en
General
-
Target
fa9c1403f25e58fcf4b61a5bb895404c
-
Size
512KB
-
MD5
fa9c1403f25e58fcf4b61a5bb895404c
-
SHA1
d49344dd7ba69352da8a6b508a2945059728471d
-
SHA256
754a2c8fb5949071b5b546158f1fe6d84241bb2b6d4c671af08f55e138d070a8
-
SHA512
3a4d41b1e90f825635aa75f164fd778d907ba56ae7d21a929c0b8ee357c847ecaacb182048652e0fe723536c8841d6f918cd52c6a50a2b9cbbfc07d629fd3366
-
SSDEEP
12288:rq72CubXrE76FAo2Wbnp8eRf4eUs3NvyrEWdITbhuUyZW/:O6Cufn2WSeRf4eUs3NqrlITbAUyZU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa9c1403f25e58fcf4b61a5bb895404c
Files
-
fa9c1403f25e58fcf4b61a5bb895404c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 806KB - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 267B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE