Static task
static1
Behavioral task
behavioral1
Sample
fa8c23c04d16cd288be5342397fcd6cc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fa8c23c04d16cd288be5342397fcd6cc.exe
Resource
win10v2004-20231215-en
General
-
Target
fa8c23c04d16cd288be5342397fcd6cc
-
Size
359KB
-
MD5
fa8c23c04d16cd288be5342397fcd6cc
-
SHA1
b4fdeaad9dfb0d4dc2f6620bc35cb13a16923a4f
-
SHA256
c1b69e442420e4411cb66ccbc02fcdec19eee9c93dd633e4da0657e6e2a53b58
-
SHA512
c7b477c7a9c84400c8a52c6f4d72cc31c4750f22d9a4427f09a1261166f316b4854992cd15422894bf47eac9d1ac870b4e1d858a8130d763573f0e3612d60be6
-
SSDEEP
6144:8Yws74BFmkq8f+9ufL5Anh+dL0FTucEj9KVatC1d1yW0PKKrOn0UiIdVJeQK7Vdr:8YwayW9UVNw644kRr03r1YVJ9KH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa8c23c04d16cd288be5342397fcd6cc
Files
-
fa8c23c04d16cd288be5342397fcd6cc.exe windows:4 windows x86 arch:x86
cb48822d4f6af1d36a44f1d7f3aa3efd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GlobalFree
Sections
�ύ�08� Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
O��@���) Size: 342KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�u���o� Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
^C�w�x� Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE