Static task
static1
Behavioral task
behavioral1
Sample
fab4318e0b3c6740c7eabd2e4e7457f3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fab4318e0b3c6740c7eabd2e4e7457f3.exe
Resource
win10v2004-20231215-en
General
-
Target
fab4318e0b3c6740c7eabd2e4e7457f3
-
Size
155KB
-
MD5
fab4318e0b3c6740c7eabd2e4e7457f3
-
SHA1
a0c9b40d1e959f8021e8622e1b2eed8a726adb73
-
SHA256
e4e7159d4def075ecf6aa63f929144373a4313c540526f8bb6860cf9065b254d
-
SHA512
e2631fc2cf454be4452960b232234e6b9ea693103615277739a625a69d1db427fbfb6ee960c2397fa122dbeaad5336f92c627acbffd301ffd120223d10d9ec34
-
SSDEEP
3072:hHRaZKtmqL4mPEWkhkadYa2MPLvPxQoW2ktxgwoZHTW+inm0g/VX92HOsz0:hH/XsmPEWtY99ruIk+im0KVXSOsz0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fab4318e0b3c6740c7eabd2e4e7457f3
Files
-
fab4318e0b3c6740c7eabd2e4e7457f3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 221KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 119KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE