Static task
static1
Behavioral task
behavioral1
Sample
fa45cf8f641c1c4b6b0601e0c05a19032637692548ec4944c037e765be68ec23.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa45cf8f641c1c4b6b0601e0c05a19032637692548ec4944c037e765be68ec23.exe
Resource
win10v2004-20240226-en
General
-
Target
fa45cf8f641c1c4b6b0601e0c05a19032637692548ec4944c037e765be68ec23
-
Size
506KB
-
MD5
b28fd387b385a1a04e0caed60a43fb44
-
SHA1
5938fb2741d4f24dd97ad90a68b41e7f47b3bd76
-
SHA256
fa45cf8f641c1c4b6b0601e0c05a19032637692548ec4944c037e765be68ec23
-
SHA512
261bd7b57ac8effa955cc07fee8b150f088c60aca07d6adf056b9e48893974e9372fe7c24ea91121f6a608b90636180e2ae3ab8f8d789ac1b67e17fb2067c0b4
-
SSDEEP
6144:jVfjmNVq4XzYHgYTg7bVAQpDUCpzjWtYT5pkeipqwXFtLcuOB+dXOebKVFp9i9Bl:57+TXzHLOPt7x+4K8+fVmCyDoP0F2Pfa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa45cf8f641c1c4b6b0601e0c05a19032637692548ec4944c037e765be68ec23
Files
-
fa45cf8f641c1c4b6b0601e0c05a19032637692548ec4944c037e765be68ec23.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE