Static task
static1
General
-
Target
FAFA09CF1F3108F157C5959A5F083485.exe
-
Size
189KB
-
MD5
fafa09cf1f3108f157c5959a5f083485
-
SHA1
05904ef251463df254b6834af85a924ca4a01640
-
SHA256
9ee21d23bc53d83537bc82985ddb2aa9a7ea80b254b35a361ab122130e962417
-
SHA512
9b513b8a4640abe456b4a729e77c6e9f0eba8b23e6c749d4bafc1191c4a1d567dc345b7864976617b985ddf8f3e58cff6c51d012e6161fe6f16f04ca37c619bc
-
SSDEEP
3072:FfUgCiOyegJyB0M3AIFLyIG6tV69eXmyr4DOiiiWn+CmW82G0J97vI0HbqLBBT:FfDOy5JyqM3r9yINtV69eX34oiWn+CmX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource FAFA09CF1F3108F157C5959A5F083485.exe
Files
-
FAFA09CF1F3108F157C5959A5F083485.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
yO!81yd Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ