Static task
static1
Behavioral task
behavioral1
Sample
fa4c1211cd6642b964e6f42335988685d3dd0098801402cfa4f49d30e295a2aa.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fa4c1211cd6642b964e6f42335988685d3dd0098801402cfa4f49d30e295a2aa.exe
Resource
win10v2004-20240802-en
General
-
Target
fa4c1211cd6642b964e6f42335988685d3dd0098801402cfa4f49d30e295a2aa
-
Size
64KB
-
MD5
7e00b3e81c55c0c40dc5383b38ff4584
-
SHA1
b8d6161402af651c207fb94714628db5728bb9ab
-
SHA256
fa4c1211cd6642b964e6f42335988685d3dd0098801402cfa4f49d30e295a2aa
-
SHA512
53bea95d7bc5b20a8c9ffcc3d7e24f76db601463c07737231ed3d7d9418980846d3d96650f2e41f0cb8546afccb7673eddc46c578a4154b51d1362b745fb4dd8
-
SSDEEP
768:3pm/qd6FigmjnXJU2WO2E89fnNyylbaTfl5KFEXUvCE5yimdguAQCOlll9EF03eC:ZgLK5b2DytKJvCE5Fm6KCNTgNtn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa4c1211cd6642b964e6f42335988685d3dd0098801402cfa4f49d30e295a2aa
Files
-
fa4c1211cd6642b964e6f42335988685d3dd0098801402cfa4f49d30e295a2aa.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ