Static task
static1
Behavioral task
behavioral1
Sample
fecafc064fed63fa48ed1b228ea6a141.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fecafc064fed63fa48ed1b228ea6a141.exe
Resource
win10v2004-20231215-en
General
-
Target
fecafc064fed63fa48ed1b228ea6a141
-
Size
431KB
-
MD5
fecafc064fed63fa48ed1b228ea6a141
-
SHA1
f46552b6dc158ef3468c13f537cac88dfe1ad414
-
SHA256
e45fbc0ceff765b9729b380ca844e61d5ed25d14d64e3db9211b54ed89cae56a
-
SHA512
6c94ed77b6b6de886f76a2acf11ac043da7bf27f9075f2a287228924ea0a41640577dbda53f28ce6850b2f1a63a84a1f443cb1c128b5d7e1417a68662f283da9
-
SSDEEP
12288:qKgpppTx7le6fZeGM332O7abTmQZiYTZ8:RCppt7le6fQ7O/mQZiO8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fecafc064fed63fa48ed1b228ea6a141
Files
-
fecafc064fed63fa48ed1b228ea6a141.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 428KB - Virtual size: 427KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ