Static task
static1
Behavioral task
behavioral1
Sample
fb2c13a859a91c5dad1f8a9632d5989356153caef6bac8e684933ac979071d04.exe
Resource
win7-20240419-en
General
-
Target
fb2c13a859a91c5dad1f8a9632d5989356153caef6bac8e684933ac979071d04.exe
-
Size
2.7MB
-
MD5
e11acfeb4c5abd3107db3ec3f444aa68
-
SHA1
9ae203f30e57491e7b40be60c4fd92845c4e8903
-
SHA256
fb2c13a859a91c5dad1f8a9632d5989356153caef6bac8e684933ac979071d04
-
SHA512
6d494a39736c1566847c4745e8874759eb78201a385633122c69e1b1f652865165bc0e10d6a4867e598f086e8895a20fdfe0e2a8b4e2961d805dc4df9f93bd13
-
SSDEEP
49152:t0VfAsnOwpwAD8LC6tjPIE0btjchR8whX7eJFHh17TxlnPRLdWPCNx2p:mVfAsOwpwHCWEzjiUJlnPJdWqNx
Malware Config
Signatures
-
Detects executables packed with SmartAssembly 1 IoCs
Processes:
resource yara_rule sample INDICATOR_EXE_Packed_SmartAssembly -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource fb2c13a859a91c5dad1f8a9632d5989356153caef6bac8e684933ac979071d04.exe
Files
-
fb2c13a859a91c5dad1f8a9632d5989356153caef6bac8e684933ac979071d04.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ