Static task
static1
Behavioral task
behavioral1
Sample
fc208653ba9542dc2c52c17d42b8ead4c28a5ac9131256f69c0dc25499d07db9N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fc208653ba9542dc2c52c17d42b8ead4c28a5ac9131256f69c0dc25499d07db9N.exe
Resource
win10v2004-20240910-en
General
-
Target
fc208653ba9542dc2c52c17d42b8ead4c28a5ac9131256f69c0dc25499d07db9N
-
Size
85KB
-
MD5
d4a9bf4c6c2bbe5b1b9bc4652a09c960
-
SHA1
4a80cfc0d16c6f477522b89111a83418e226d3c9
-
SHA256
fc208653ba9542dc2c52c17d42b8ead4c28a5ac9131256f69c0dc25499d07db9
-
SHA512
ad43d81ddb5edcaa280554b280c7519a5c71f75e04676f72c8f99c2a79dac3d86970e1711a6acf4b4cecc2bf11f099c43b90c87bad767724b686eab16c5e0ef4
-
SSDEEP
1536:+4zfyqymVcHOCrkG7Hjql2wP2LH0MQ262AjCsQ2PCZZrqOlNfVSLUK+:BymVcHOCrkw2kwUH0MQH2qC7ZQOlzSLA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc208653ba9542dc2c52c17d42b8ead4c28a5ac9131256f69c0dc25499d07db9N
Files
-
fc208653ba9542dc2c52c17d42b8ead4c28a5ac9131256f69c0dc25499d07db9N.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.00cfg Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kofbl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.didat Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ