fiCE.pdb
Static task
static1
Behavioral task
behavioral1
Sample
tmpo3_85b6r.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
tmpo3_85b6r.exe
Resource
win10v2004-20240226-en
General
-
Target
tmpo3_85b6r
-
Size
517KB
-
MD5
64afb0a80b42080457808b259de75fdd
-
SHA1
cb6116a734ef2b52c9d1a2d7a2d7d141c60970bc
-
SHA256
d31b7bd1d58b1d659134351b9ff20269c177fd3dbae7bc18da3e098a29af30a4
-
SHA512
e038b4ff7335b81779f81053399c01cab68b64dcc7cf99438be8b5d0cccf7e58be963fb4441838af03c6a31c1e616aef82520f1307a21d43f9a3c74411843d31
-
SSDEEP
12288:+d+8DLLBj9o8/U50979bXefe4gj0dYzzjoMetIUHF:+EQo8c6BN0ZCLStHHF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource tmpo3_85b6r
Files
-
tmpo3_85b6r.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 515KB - Virtual size: 514KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ