Static task
static1
Behavioral task
behavioral1
Sample
fd00e68ed9735629cc1ba6710baf4d4b5ba64f659f66a228fdc34343488f67bc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fd00e68ed9735629cc1ba6710baf4d4b5ba64f659f66a228fdc34343488f67bc.exe
Resource
win10v2004-20240412-en
General
-
Target
fd00e68ed9735629cc1ba6710baf4d4b5ba64f659f66a228fdc34343488f67bc
-
Size
76KB
-
MD5
0eaba711c324f98ac89acac39b2f3351
-
SHA1
8c1a26b3a656e43141c39f3f09f29c32f75b1a5e
-
SHA256
fd00e68ed9735629cc1ba6710baf4d4b5ba64f659f66a228fdc34343488f67bc
-
SHA512
b64ad16ebe7c324e0aeb1409a2d63ec6c8317e70d1839aab3636f25e08545fc890c1aa3dd6d2e07c819b61edd40e5a0d927f0a6ebc17bcfef3c9355221c527f0
-
SSDEEP
1536:ZuwKU999999996FoYkytbdH4Md7Qr8aeK10:Ip9B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd00e68ed9735629cc1ba6710baf4d4b5ba64f659f66a228fdc34343488f67bc
Files
-
fd00e68ed9735629cc1ba6710baf4d4b5ba64f659f66a228fdc34343488f67bc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE