Behavioral task
behavioral1
Sample
fabcf63c5f61c41dba1ab1080dc5a063.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fabcf63c5f61c41dba1ab1080dc5a063.exe
Resource
win10v2004-20231222-en
General
-
Target
fabcf63c5f61c41dba1ab1080dc5a063.exe
-
Size
644KB
-
MD5
fabcf63c5f61c41dba1ab1080dc5a063
-
SHA1
7229d205a590fea231f9d4b4080a8834c92af202
-
SHA256
14dfe8f10af861c6946a4ef5f4717c8d3456c199e5b3930e94520b04c4427009
-
SHA512
5ad2c4d1aaa080229e86082722b39c70d000f7391236686e8053b7d3d78e2363e2f6cec16563d669fac070ee9a5edc64e5e7bed202fe96285754b64f6fbb34a1
-
SSDEEP
12288:3qnOlSPHkVfZmbAzNsjLODkM5hCMJOyJPKXZR2G+J45ckjQyC8tK:3+OEkhmb2iji55dUD
Malware Config
Signatures
Files
-
fabcf63c5f61c41dba1ab1080dc5a063.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 642KB - Virtual size: 641KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ