Static task
static1
Behavioral task
behavioral1
Sample
fb479114c1e38fb0629a15647eb02395.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fb479114c1e38fb0629a15647eb02395.exe
Resource
win10v2004-20231215-en
General
-
Target
fb479114c1e38fb0629a15647eb02395
-
Size
143KB
-
MD5
fb479114c1e38fb0629a15647eb02395
-
SHA1
f6093b8d01d69248f288a97f07cedcec2fef3be8
-
SHA256
e6076a63245371ce10eb8aee4d3331a9b270382f1722c01bfcad9812e9956d02
-
SHA512
9c5402160f8bcc2489aa415c7706b0625d97cc5ba2c4aeb774b5e70bd145b5f9c6f482151491ed5ade1b05045c6e498b31e9c966e58471eb584d1f1f704ec486
-
SSDEEP
3072:GDw9MjFxYy/3n8nxKBaYgevB610ed6kmGQI:kw9sFxYyf8xkgevB6VkGZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb479114c1e38fb0629a15647eb02395
Files
-
fb479114c1e38fb0629a15647eb02395.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 112KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ