Static task
static1
Behavioral task
behavioral1
Sample
fad21418e79e00072674fe306813923e2f84335a414e17bc810e11922d5ac1ff.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
fad21418e79e00072674fe306813923e2f84335a414e17bc810e11922d5ac1ff.exe
Resource
win10v2004-20240508-en
General
-
Target
fad21418e79e00072674fe306813923e2f84335a414e17bc810e11922d5ac1ff
-
Size
91KB
-
MD5
ffbd0c82b6bbd0495c43fe03665f6645
-
SHA1
3322de7a8d5085454e88f34e3955ddfe62eb0304
-
SHA256
fad21418e79e00072674fe306813923e2f84335a414e17bc810e11922d5ac1ff
-
SHA512
ff5af205c0f648b10f90d99bb435d9b87b43f94dee55d4bee3865df87654192efd4dd25bc03d96636228c20284b22c00dd1293d14ed80cf2a1c15e62324a0091
-
SSDEEP
1536:E946uvwAuqCk2d3MYHITiM+fypgpHzb9dZVX9fHMvG0D3XJk4HvPvQdC:t6uv7952hMGOgXdZt9P6D3XJk4r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fad21418e79e00072674fe306813923e2f84335a414e17bc810e11922d5ac1ff -
NSIS installer 1 IoCs
resource yara_rule sample nsis_installer_2
Files
-
fad21418e79e00072674fe306813923e2f84335a414e17bc810e11922d5ac1ff.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ