Static task
static1
Behavioral task
behavioral1
Sample
fafb7da3dd764b30a0520df8ef886a00c869de82dc16522890fbc6615523dafb.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
fafb7da3dd764b30a0520df8ef886a00c869de82dc16522890fbc6615523dafb.exe
Resource
win10v2004-20240508-en
General
-
Target
fafb7da3dd764b30a0520df8ef886a00c869de82dc16522890fbc6615523dafb
-
Size
1021KB
-
MD5
4db38d3b853341f4a0aece9626214fd9
-
SHA1
3fd59ab083dd9bf0136ee689f7e8104023b4c17b
-
SHA256
fafb7da3dd764b30a0520df8ef886a00c869de82dc16522890fbc6615523dafb
-
SHA512
27b5fe0c678f29b9b57bc03f3b32e54b188e6a92c07fcc698d2bc55fc150e74b45b303c031bf00037a5101000101ab38ddb11110ae3aa98360e51cb90f1a4a1a
-
SSDEEP
24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAUj:IylFHUv6ReIt0jSrOI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fafb7da3dd764b30a0520df8ef886a00c869de82dc16522890fbc6615523dafb
Files
-
fafb7da3dd764b30a0520df8ef886a00c869de82dc16522890fbc6615523dafb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 744KB - Virtual size: 743KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 148KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 277KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ