Static task
static1
Behavioral task
behavioral1
Sample
fa5f86d5335892992d6abbac5b8fb1c30da807fdec053233dabd7b590ffb7f4e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa5f86d5335892992d6abbac5b8fb1c30da807fdec053233dabd7b590ffb7f4e.exe
Resource
win10v2004-20240412-en
General
-
Target
fa5f86d5335892992d6abbac5b8fb1c30da807fdec053233dabd7b590ffb7f4e
-
Size
31KB
-
MD5
055e7f9f7eb076d25ab959e62a5d7826
-
SHA1
f4f72e99147f86e618f285a4b4d43476fa56b57e
-
SHA256
fa5f86d5335892992d6abbac5b8fb1c30da807fdec053233dabd7b590ffb7f4e
-
SHA512
a6aa8098120c85e9c1c59c91b0c06a63070cdd732ec6e816214c10faf18a18a25c393e5c4daa576b88fd919ba83d06e6d01e3944875134265dbb2b49447a9786
-
SSDEEP
768:2ZZZZZZZZZZZZZZgrBaJ3rnLg3FISrlZHqcol2NReG7h0QSUXVzq0c0F:2MVMAISrlZHNoANReSzJq0c4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa5f86d5335892992d6abbac5b8fb1c30da807fdec053233dabd7b590ffb7f4e
Files
-
fa5f86d5335892992d6abbac5b8fb1c30da807fdec053233dabd7b590ffb7f4e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE