Static task
static1
Behavioral task
behavioral1
Sample
fbcd47d1ae7422b87d525af8fb27fef6bf0946137d6e635e4be4adfd6a150f7e.exe
Resource
win7-20231129-en
General
-
Target
4c8ba76bd8fd57f5196d1e1795b243e542590b7a7f1a4de5a7aea14193ec9585
-
Size
671KB
-
MD5
2467c91dde1668b08a2bf578bc0c5467
-
SHA1
803a4565f051fe494801f583a80d45a04b39d95d
-
SHA256
4c8ba76bd8fd57f5196d1e1795b243e542590b7a7f1a4de5a7aea14193ec9585
-
SHA512
6d1564b83f2fe1fd09929c4af447267a0dc5a59e1d8c69aff3f2c6b5010160748d2937ee36f072f8db5b28112590268a90e3f885689a61c33fa11997d58e4121
-
SSDEEP
12288:Uuv6BgTS1S3AyODpz7+JRjbEcMcJD2tK5RjQJ4DgKnaF6KRoas:FYgT8SQy27+JRHEcFPE8gKnaEGor
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/fbcd47d1ae7422b87d525af8fb27fef6bf0946137d6e635e4be4adfd6a150f7e.exe
Files
-
4c8ba76bd8fd57f5196d1e1795b243e542590b7a7f1a4de5a7aea14193ec9585.zip
Password: infected
-
fbcd47d1ae7422b87d525af8fb27fef6bf0946137d6e635e4be4adfd6a150f7e.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 790KB - Virtual size: 790KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ