Static task
static1
Behavioral task
behavioral1
Sample
fed37e1bc50de7820ff67d25dc28532d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fed37e1bc50de7820ff67d25dc28532d.exe
Resource
win10v2004-20231222-en
General
-
Target
fed37e1bc50de7820ff67d25dc28532d
-
Size
138KB
-
MD5
fed37e1bc50de7820ff67d25dc28532d
-
SHA1
52d3788536f96de1acbe1760d15e5a1687cd8d78
-
SHA256
d475a5a29ac98e080380cf2c8da70eb027cf7413e0db0ec9bc2eda5f0a09254b
-
SHA512
c8ffccc56e1904d07ebb8210e04fe88eab65485e2ecb9a3ddd4c203d564f327690d5de569ccfdf9d1f9ed33d1612109e9ecd40f94c75a2d4fecc106aa616a1af
-
SSDEEP
3072:ng67jz/DBZUdDSejrw55AqvbGccDNwGrdgr:g6Pz/DBZUdDSYra5AvPDLrdgr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fed37e1bc50de7820ff67d25dc28532d
Files
-
fed37e1bc50de7820ff67d25dc28532d.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: - Virtual size: 304KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE