Static task
static1
Behavioral task
behavioral1
Sample
fafa913bddeb1ad8fd50ba4a2532576b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fafa913bddeb1ad8fd50ba4a2532576b.exe
Resource
win10v2004-20231222-en
General
-
Target
fafa913bddeb1ad8fd50ba4a2532576b
-
Size
1024KB
-
MD5
fafa913bddeb1ad8fd50ba4a2532576b
-
SHA1
6a1bb4600a495af0a18beebc9294070364f07f7c
-
SHA256
918c7437c2385543e66fcf5c8d1240d07eb8acabcf6a6f0f5e611a7524a33398
-
SHA512
45f0220a17cc3ae29cc66ab98b73a9635262fdb4bd6ff7063865f3ceff225da99cb620f0c43f9c3c1147e4db36fdc6d63a83c7e7d800c3cec6b8409b86530e09
-
SSDEEP
24576:q3olg0SQ47NCRhfoc81Mpkruh8geKHy5GasYExWNWyhyD3:q/0r48fbV6ruW4asYutD3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fafa913bddeb1ad8fd50ba4a2532576b
Files
-
fafa913bddeb1ad8fd50ba4a2532576b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 375B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE