Static task
static1
Behavioral task
behavioral1
Sample
fAxfhpffwFD9HRg.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fAxfhpffwFD9HRg.exe
Resource
win10v2004-20231215-en
General
-
Target
fAxfhpffwFD9HRg.exe
-
Size
660KB
-
MD5
27f1f7e0fe0ac632c1244f189ea7730c
-
SHA1
994fd9e8281dade66700d042a2fcc76c0beb9170
-
SHA256
33cde805b1aa4d8bdab56b02496c00745feadbbf0931c1f759fb9669d0090b80
-
SHA512
409c019d54fdb66be6a8ca847b8ce1725fee1613c538cb4c74ddbf4e4aef17594fea7064d9f0370fed2ebfdcac0944206c7150f61ee81bcf16fb5927b958d639
-
SSDEEP
12288:mhjLBJI3xw7T6pAljke0qjOQfk0PlqohJ1QuZeS8cWZ7SFOy27/p:2jruO7f52wDPlqon1Qqsy29
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fAxfhpffwFD9HRg.exe
Files
-
fAxfhpffwFD9HRg.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 650KB - Virtual size: 649KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ