Static task
static1
Behavioral task
behavioral1
Sample
FaceGrupos ADD.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
FaceGrupos ADD.exe
Resource
win10v2004-20240226-en
General
-
Target
ba8c524a1d98e5b2bf39c0c1cfb9a1aa
-
Size
769KB
-
MD5
ba8c524a1d98e5b2bf39c0c1cfb9a1aa
-
SHA1
deb229010c3d8dea40b51cd39aa3dfdb29756731
-
SHA256
4ddb06243428da39fbb3ebac20502a677734049f054bf906324c5efa51aba22e
-
SHA512
93df7d167151a97b6d509a1179cd29f3b7b88997a50be702e699220f3e4f0ff8d66d0cef6eada36ec8ac1fbfee7af0965ff3e009f1c074c8a5c25315db36184a
-
SSDEEP
24576:TQnobuQz+4bMjgyFk7j8y7rVoLIanhrEJWLT7:TQnwC4SWYA5oLP4JWLP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/FaceGrupos ADD.exe
Files
-
ba8c524a1d98e5b2bf39c0c1cfb9a1aa.rar
-
FaceGrupos ADD.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 43KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 693KB - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE