Static task
static1
Behavioral task
behavioral1
Sample
fad46346168a27675a246427c20ea17a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fad46346168a27675a246427c20ea17a.exe
Resource
win10v2004-20231215-en
General
-
Target
fad46346168a27675a246427c20ea17a
-
Size
9KB
-
MD5
fad46346168a27675a246427c20ea17a
-
SHA1
1e5f5a0963ffe7b0d17101fe8afc3221c228665d
-
SHA256
779026550e8e5ab7ac1cacb2588360553bbaf01dba6b59b516754de131cf39da
-
SHA512
058fc2999a5a398090b940faf4b55a34487b245ca1309331439dd50ac64c7a9dce38c801386ee58970ba870fc4572a725edf0b48f0a0b44806a3e1583ba4bb2b
-
SSDEEP
192:nBksuPzHNQqBeMZZ3v93Vnjdwqzp03EhGB:sHhBeMBFnhwql09
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fad46346168a27675a246427c20ea17a
Files
-
fad46346168a27675a246427c20ea17a.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ