FGGX.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ee57b6fa1e5a3c5ef776b79f32820327bcb3fe1974eeddf65c0eb56131193397.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ee57b6fa1e5a3c5ef776b79f32820327bcb3fe1974eeddf65c0eb56131193397.exe
Resource
win10v2004-20240412-en
General
-
Target
c8412ba73f99a8823ebc2e44903a6689288d1bbeb746ce8a6daad830715a9107
-
Size
554KB
-
MD5
3ad36999aaa7002819b99873901689be
-
SHA1
2f144661a1a91fd0778661533c7865a01f5bafd5
-
SHA256
c8412ba73f99a8823ebc2e44903a6689288d1bbeb746ce8a6daad830715a9107
-
SHA512
36055fbf010490e3456e5535bc210c2d25fd306fc141e1f0aee540adda01d294ba0431aefcf6acecff831d4f04d164f0dcd9345e40e422f65131ad41192cea2a
-
SSDEEP
12288:JXQm5B3SO14e3X+qX9kKh3JV7EK/dUD0SoT2vce3V:t/zi4p3lvVRqDNa2Ue3V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ee57b6fa1e5a3c5ef776b79f32820327bcb3fe1974eeddf65c0eb56131193397.exe
Files
-
c8412ba73f99a8823ebc2e44903a6689288d1bbeb746ce8a6daad830715a9107.zip
Password: infected
-
ee57b6fa1e5a3c5ef776b79f32820327bcb3fe1974eeddf65c0eb56131193397.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 728KB - Virtual size: 728KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ