Static task
static1
Behavioral task
behavioral1
Sample
fd1c3b3cb72ec3983ad1fd956589b8c4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fd1c3b3cb72ec3983ad1fd956589b8c4.exe
Resource
win10v2004-20231215-en
General
-
Target
fd1c3b3cb72ec3983ad1fd956589b8c4
-
Size
117KB
-
MD5
fd1c3b3cb72ec3983ad1fd956589b8c4
-
SHA1
ee271d92c96cd04054f954d9e0fe65618866eef5
-
SHA256
4bb2ea8b7b5c8fb1d8cf12bf8a74f08442e981f5b7709a5c31cf37a3996a3a4a
-
SHA512
a873a0ba2458c19ebfe2b07893b77c94baf6fa8462e5a6666c4e6b2bc2a00ffd57f129516b74cc3e03a5c318a7951334bee0623434f2ee5b3250783b5bdd83d6
-
SSDEEP
3072:15ey6Tv+PIV7oIlZh1SgUxZNHA/nEHa7+Nh8ba45Zq:15AqIdompirg/nEHa7+NSa45Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd1c3b3cb72ec3983ad1fd956589b8c4
Files
-
fd1c3b3cb72ec3983ad1fd956589b8c4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
wmdgzef Size: 1KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fxfds Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ