Static task
static1
Behavioral task
behavioral1
Sample
fb80e352828809de7791de51ba2eb01d08e95a4f917482178d88d199c7e2c12d.exe
Resource
win7-20240215-en
General
-
Target
fb80e352828809de7791de51ba2eb01d08e95a4f917482178d88d199c7e2c12d
-
Size
277KB
-
MD5
45d305a22c0b0bcd6400096d779e5e08
-
SHA1
cf868088e7c5650fdb74e95bd89484f5b96098f8
-
SHA256
fb80e352828809de7791de51ba2eb01d08e95a4f917482178d88d199c7e2c12d
-
SHA512
e270fc1a1f847590514acb452a127578900ed56e496b406ab9dec8c18749455707483268ea786a6da47d552d53f7a7ff3da6c4c00016b2e7c30a81d75b77ea7b
-
SSDEEP
6144:n3C9BRIG0asYFm71m8+GdkB9yMu7VvemV3:n3C9uYA71kSMu/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource fb80e352828809de7791de51ba2eb01d08e95a4f917482178d88d199c7e2c12d
Files
-
fb80e352828809de7791de51ba2eb01d08e95a4f917482178d88d199c7e2c12d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ