fcEXP
Static task
static1
Behavioral task
behavioral1
Sample
3a20f6d6c2ff383c217942291411a7e0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3a20f6d6c2ff383c217942291411a7e0.exe
Resource
win10v2004-20231222-en
General
-
Target
3a20f6d6c2ff383c217942291411a7e0
-
Size
11.3MB
-
MD5
3a20f6d6c2ff383c217942291411a7e0
-
SHA1
2901721b303d7b5bff52e6a49454f1b91f233e71
-
SHA256
e0a3130787b1a141eb06e3e273a0bdb628cecfffea25c66ba83e815257119b73
-
SHA512
ef4420e8ee54d8c04b019c40f89e23436a9ca7fc3b509de5bd1697d46d9df926fbbea92f29634e93643bb9e35966de0cdc294d2b862bc0fc4a45d83e7f5733d2
-
SSDEEP
196608:pQSC9rEEJP/+EywpbF3jFPNlqkUBY6FSLuEzB:pQSC9PZ/fpbF3jlNlqkUBYBP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a20f6d6c2ff383c217942291411a7e0
Files
-
3a20f6d6c2ff383c217942291411a7e0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: 9.5MB - Virtual size: 9.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 232KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 392KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.newimp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE