Static task
static1
Behavioral task
behavioral1
Sample
FTE98767800000.exe
Resource
win7-20240729-en
General
-
Target
18082024_0919_16082024_FTE98767800000.doc.z
-
Size
840KB
-
MD5
328c9827047c43f6e44641a0fa9cfd8d
-
SHA1
80c9882457c5f518a80ee41da17996b0ad021e39
-
SHA256
63660df7602191c226278902e159312a16a1c844db329cca146fb702a2a51256
-
SHA512
6068fae25061158110efa64b0d0772ab08486e255655c529421555176e0a3ebad2607910c9febc0c4e94de4ca05d9f0d568bcd9985609cab62224407b3628f8f
-
SSDEEP
12288:PrmRUlFJzN4bMAb1p57dJosN+m6va8F3I6FoAsLDvMR3cCDt62GeAgqbE3EDkIj:Pxl3zNw5p5Pf+mQa8F46LsLHCnykjm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/FTE98767800000.bat
Files
-
18082024_0919_16082024_FTE98767800000.doc.z.zip
Password: infected
-
FTE98767800000.bat.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ