Static task
static1
Behavioral task
behavioral1
Sample
fac8270504cdabfe27f578981bdda24afee15f62e625c9fec23283ca1b70a73e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fac8270504cdabfe27f578981bdda24afee15f62e625c9fec23283ca1b70a73e.exe
Resource
win10v2004-20240226-en
General
-
Target
fac8270504cdabfe27f578981bdda24afee15f62e625c9fec23283ca1b70a73e
-
Size
5.5MB
-
MD5
02a809777a7398df95a6a82435fd3fb0
-
SHA1
4e097b2faeb18fd03e447177817124578d24b302
-
SHA256
fac8270504cdabfe27f578981bdda24afee15f62e625c9fec23283ca1b70a73e
-
SHA512
5f87d181ad75952c4ec3cfa7c6a3959e7229e99a242f314686a50c31acb7543816c96e9cf9f4b527bd1ad2d2d49f94800942398b8ff797fa46f41d66bdd6e92c
-
SSDEEP
98304:hD9TU0gdhGReu+P23HxuEJ+pt4ydy0X1gsVPmfrH69UfTUwni7R0I3TlFgQV:hqrgez8Hxul/4WlpVkrgX+Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fac8270504cdabfe27f578981bdda24afee15f62e625c9fec23283ca1b70a73e
Files
-
fac8270504cdabfe27f578981bdda24afee15f62e625c9fec23283ca1b70a73e.exe windows:5 windows x86 arch:x86
4e9ca4076bd002e30e2337f2edc6ce50
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
advapi32
RegQueryInfoKeyW
kernel32
GetTickCount
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
CharUpperBuffW
Sections
.text Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.-Y* Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.htext Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. p% Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.G8) Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c-7 Size: 5.5MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ