Static task
static1
Behavioral task
behavioral1
Sample
fac7cc14703da470ff69e79f4b04f8a1fb7c5920c352221deaae88f12f71ca98N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fac7cc14703da470ff69e79f4b04f8a1fb7c5920c352221deaae88f12f71ca98N.exe
Resource
win10v2004-20240802-en
General
-
Target
fac7cc14703da470ff69e79f4b04f8a1fb7c5920c352221deaae88f12f71ca98N
-
Size
75KB
-
MD5
f76a5b360a73525dbd9c4ccf71dc6180
-
SHA1
a9745dad938359a6640e21cc44ec6acdd9f26bb6
-
SHA256
fac7cc14703da470ff69e79f4b04f8a1fb7c5920c352221deaae88f12f71ca98
-
SHA512
a28302cb9b373c4330dbc33446c0e5982179057168fdfd23988121f5a6f8855749fe6a3096e2bcccc19b4c3eea9d0095c3e182793460beb23a1b03ca1617b22f
-
SSDEEP
1536:D1uM3g3u1CEVEdBQg311Fu0DAq/BfBNM1c5ALltMuJcG5kXOezNoRIQI:xu73ujE3511sotrKLMuv2zyIR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fac7cc14703da470ff69e79f4b04f8a1fb7c5920c352221deaae88f12f71ca98N
Files
-
fac7cc14703da470ff69e79f4b04f8a1fb7c5920c352221deaae88f12f71ca98N.exe windows:4 windows x86 arch:x86
f35da0feaeb1ea3121dbe4b43d43d5fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntExA
kernel32.dll.
LoadLibraryA
Sleep
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE