Static task
static1
Behavioral task
behavioral1
Sample
fcb7fbab9a5e7fa5719845c8836d8488.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fcb7fbab9a5e7fa5719845c8836d8488.exe
Resource
win10v2004-20231215-en
General
-
Target
fcb7fbab9a5e7fa5719845c8836d8488
-
Size
112KB
-
MD5
fcb7fbab9a5e7fa5719845c8836d8488
-
SHA1
75c43d2f8bd962f2839253f4a2908978e653570e
-
SHA256
98c689859841a570a2da185fd996bad2e8f76c3cd28a978baf6dc529cab72376
-
SHA512
010ce4df41b25b642de3613fc1808a857de56ef566b61c0a0b3e1b3fac4e0e910b46a7730ac275bb51efeca5f75fffb79f0f13417a0f3eb2ef6a95911b2d93dd
-
SSDEEP
1536:zBXRio2nR9KSOGWlKdMY+1MZynGYrY3V+U+tp1je0oNV:zBXqR9KSObKdz+1CynGYrYFvKjebN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcb7fbab9a5e7fa5719845c8836d8488
Files
-
fcb7fbab9a5e7fa5719845c8836d8488.exe windows:5 windows x86 arch:x86
2b25e17a3fc58f1e2e15e06cdfe46d26
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
VirtualFree
lstrcmpiA
Sleep
ExitProcess
user32
GetDesktopWindow
winmm
timeSetEvent
comctl32
InitCommonControls
Sections
.text Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ