Static task
static1
Behavioral task
behavioral1
Sample
fd3492d652a8b62bd590d1a00f4c369ea4ba5f794f65ccbeb7a11b9fb77cf106.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fd3492d652a8b62bd590d1a00f4c369ea4ba5f794f65ccbeb7a11b9fb77cf106.exe
Resource
win10v2004-20240419-en
General
-
Target
fd3492d652a8b62bd590d1a00f4c369ea4ba5f794f65ccbeb7a11b9fb77cf106
-
Size
67KB
-
MD5
672178983a25902a17f69f7abe4d2e8d
-
SHA1
00ea02cda9e929c866be41e04526351977fa4e0a
-
SHA256
fd3492d652a8b62bd590d1a00f4c369ea4ba5f794f65ccbeb7a11b9fb77cf106
-
SHA512
2bcdd1e8c2cdf5ea6a8670cda17dc1a81c6d4ef2ca609c76ed7d3f36231061db13d7a28a3b8e20b667e7323145a1804d8787319e58fb4869c55c4af32068bc4a
-
SSDEEP
1536:SKQjilIkhOgka8alGqhsJifTduD4oTxw:94vyb06GqhsJibdMTxw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd3492d652a8b62bd590d1a00f4c369ea4ba5f794f65ccbeb7a11b9fb77cf106
Files
-
fd3492d652a8b62bd590d1a00f4c369ea4ba5f794f65ccbeb7a11b9fb77cf106.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wixburn Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ