Static task
static1
Behavioral task
behavioral1
Sample
fd048097ef68025420301674fbd1859ff756c48d97fb70686dc2cb3d0210397e.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
fd048097ef68025420301674fbd1859ff756c48d97fb70686dc2cb3d0210397e.exe
Resource
win10v2004-20240704-en
General
-
Target
fd048097ef68025420301674fbd1859ff756c48d97fb70686dc2cb3d0210397e
-
Size
1.5MB
-
MD5
2f518d34a549baf0fce63e3214400beb
-
SHA1
071eef9b270da627cc6089fb16b8fe9ad349498e
-
SHA256
fd048097ef68025420301674fbd1859ff756c48d97fb70686dc2cb3d0210397e
-
SHA512
20e421fd1b3c99b6561cac8bd4a2272230b74f94e187d745588933163d173b0fb73e59526b59956602095c5cc2b40edc172b7cd9d5f1c709ee125b4cb50a5ea7
-
SSDEEP
12288:wHZVm/7ePnv+TWM+6+xTGzgFA+u/x8acJdPACFFbLFi8cj5UQbM72voO:2v+NWu/adRYj5UQOc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd048097ef68025420301674fbd1859ff756c48d97fb70686dc2cb3d0210397e
Files
-
fd048097ef68025420301674fbd1859ff756c48d97fb70686dc2cb3d0210397e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ