Static task
static1
Behavioral task
behavioral1
Sample
fbafbd2d04ccf9b8db353974e764df0d0a3d0691406b70daf7435222271967db.exe
Resource
win10v2004-20240508-en
General
-
Target
fbafbd2d04ccf9b8db353974e764df0d0a3d0691406b70daf7435222271967db
-
Size
1.9MB
-
MD5
2e73b9e2765053f0161aa0ea34c6d1b2
-
SHA1
49f4dc0d4fa2e66f281ca67a5c3dc37b76282521
-
SHA256
fbafbd2d04ccf9b8db353974e764df0d0a3d0691406b70daf7435222271967db
-
SHA512
79e382bc44eb7bf81ee3a93a6ebe71720bece8a5b79ac77736a147ce58d36c7c165a6c6e55c8131060ff2f95bea34d1330270e0bd444392890b2a236de06869a
-
SSDEEP
49152:I0iOnygNYTF9UCDnVDC5z88nMiQLosj6vLpWHXP7F6bof:IQLYfnNoz88nQhMdWHRr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbafbd2d04ccf9b8db353974e764df0d0a3d0691406b70daf7435222271967db
Files
-
fbafbd2d04ccf9b8db353974e764df0d0a3d0691406b70daf7435222271967db.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dnavjkze Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nywokudr Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE