Static task
static1
Behavioral task
behavioral1
Sample
fb25a9fbc191cf0b3073ea877c445a974ddace8bc12c24df25f69d3404ed1484.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fb25a9fbc191cf0b3073ea877c445a974ddace8bc12c24df25f69d3404ed1484.exe
Resource
win10v2004-20231215-en
General
-
Target
fb25a9fbc191cf0b3073ea877c445a974ddace8bc12c24df25f69d3404ed1484
-
Size
622KB
-
MD5
6570495edb44e6fa31dcf04ddebd73b0
-
SHA1
27ee96df4c536cad5029dca2cef9a25a2bc93d91
-
SHA256
fb25a9fbc191cf0b3073ea877c445a974ddace8bc12c24df25f69d3404ed1484
-
SHA512
d88f89059d3229f1f6cd2e4bff4d79f85316fd431185cdbd76c433327c0d6a40e9495e5626fd70ecb342101775e55cc319162803b8fe7e526488ef8efbb843d0
-
SSDEEP
6144:eZL7VvieY4coqw6bpLNBLaZlDluVYEHQgVTxkqshoImvtp0l7KF7QG1IYie4iED:eZLdY4UTaZrTsQ0lsyH0gTHiD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb25a9fbc191cf0b3073ea877c445a974ddace8bc12c24df25f69d3404ed1484
Files
-
fb25a9fbc191cf0b3073ea877c445a974ddace8bc12c24df25f69d3404ed1484.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 559KB - Virtual size: 559KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ