Static task
static1
Behavioral task
behavioral1
Sample
faf8b35963e1dbe5d58ce0bcde488aa04f12cee754ebc235af6060c6763a768f.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
faf8b35963e1dbe5d58ce0bcde488aa04f12cee754ebc235af6060c6763a768f.exe
Resource
win10v2004-20240508-en
General
-
Target
faf8b35963e1dbe5d58ce0bcde488aa04f12cee754ebc235af6060c6763a768f
-
Size
4.6MB
-
MD5
380545b24d8c6a47a8f28a20f1500175
-
SHA1
b0766fb85e1649997082924d16098df34cf7e35c
-
SHA256
faf8b35963e1dbe5d58ce0bcde488aa04f12cee754ebc235af6060c6763a768f
-
SHA512
62a3b381f1bce3d14b7def1e3e54585511e71f5f18db9340361073a7bc4f031fed45ca709050b3faa91d003793edaea7b5c2bd83f945a2210481691a866d05d3
-
SSDEEP
98304:RTF4Y5GpdR/Yw5wZgvTvCQRM0hNZ7S+CBfl+tS917mGSvKSiKUEu3YSVi/xLUGzX:RTcqPQCe4BktSeXfRVuIS2g6cqkDNA1N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource faf8b35963e1dbe5d58ce0bcde488aa04f12cee754ebc235af6060c6763a768f
Files
-
faf8b35963e1dbe5d58ce0bcde488aa04f12cee754ebc235af6060c6763a768f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UEwn Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yofR Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
MMDlt Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE