Static task
static1
Behavioral task
behavioral1
Sample
fd362d7a62a1f681ed1b4a0d969fa36b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fd362d7a62a1f681ed1b4a0d969fa36b.exe
Resource
win10v2004-20231215-en
General
-
Target
fd362d7a62a1f681ed1b4a0d969fa36b
-
Size
5KB
-
MD5
fd362d7a62a1f681ed1b4a0d969fa36b
-
SHA1
79d3a1096abe530f07d1510347f9d0fa3ef98c97
-
SHA256
f0138fbc6e80abaf45fc2a0ed639f6e4a1504126424b42d5883f482ef6ff9dd4
-
SHA512
1ac881c2510a8b18cfe7651ab5823406da71e4bcdb7e4f410e3449c66012a56ade3a0e1d068dede437ee9c082abede840ed826c1a196a931ff87d61cb61c0159
-
SSDEEP
96:TU1JMD+dSKUpACLFEP2bsJ7n492ELk6gqNbyepf0r:TmJM6MKUptZsJjG2EA6tByepMr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd362d7a62a1f681ed1b4a0d969fa36b
Files
-
fd362d7a62a1f681ed1b4a0d969fa36b.exe windows:1 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����ta Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qnk Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE