Static task
static1
Behavioral task
behavioral1
Sample
fae84fc0cd8baa153d2e969a7cfdbdb2e4e19a5ae61edaf28e8b4df88e416c94.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fae84fc0cd8baa153d2e969a7cfdbdb2e4e19a5ae61edaf28e8b4df88e416c94.exe
Resource
win10v2004-20240508-en
General
-
Target
fae84fc0cd8baa153d2e969a7cfdbdb2e4e19a5ae61edaf28e8b4df88e416c94
-
Size
12KB
-
MD5
b27c78b761d02781ad67ec344d375fc9
-
SHA1
7ce432b1e03cd5976d84a15e253285c14e626576
-
SHA256
fae84fc0cd8baa153d2e969a7cfdbdb2e4e19a5ae61edaf28e8b4df88e416c94
-
SHA512
b1346dd0b74868f651f98af948cfa30185b1fb51c776b808510ad958771b3c59458a7439d7468f58255ba7c74f13bd5e099436cab81a39e31e0a858d9f5bdbd2
-
SSDEEP
384:YL7li/2zMq2DcEQvdQcJKLTp/NK9xaXq:mIMCQ9cXq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fae84fc0cd8baa153d2e969a7cfdbdb2e4e19a5ae61edaf28e8b4df88e416c94
Files
-
fae84fc0cd8baa153d2e969a7cfdbdb2e4e19a5ae61edaf28e8b4df88e416c94.exe .ps1 windows:4 windows x86 arch:x86 polyglot
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ