Static task
static1
Behavioral task
behavioral1
Sample
faf9c8614e7ab1219cae2a9242d6c6d1d805433afd350aa10883b1176c3d6142.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
faf9c8614e7ab1219cae2a9242d6c6d1d805433afd350aa10883b1176c3d6142.exe
Resource
win10v2004-20240709-en
General
-
Target
faf9c8614e7ab1219cae2a9242d6c6d1d805433afd350aa10883b1176c3d6142
-
Size
62KB
-
MD5
d9c2b98ae1b549328083bb287c655e53
-
SHA1
0bbddbdbb0fa29e8b41e0be7d24eb0c56e0f6af4
-
SHA256
faf9c8614e7ab1219cae2a9242d6c6d1d805433afd350aa10883b1176c3d6142
-
SHA512
20626e8ff7f2dc3869e20275e95f8bb9274d2d76a398e15d76f4ad6f5e9698bdff7935a4f783e5122941b283318c222d3624df5b1dd5e8f2ec5934d45d927b60
-
SSDEEP
1536:sFl7wlad5Kp/oEeJCw9Z34ZC3EfIQBCyRve8Cy:4dXy/Oz9ZTUtAwve8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource faf9c8614e7ab1219cae2a9242d6c6d1d805433afd350aa10883b1176c3d6142
Files
-
faf9c8614e7ab1219cae2a9242d6c6d1d805433afd350aa10883b1176c3d6142.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfcd Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ