Static task
static1
Behavioral task
behavioral1
Sample
fbdac84311cd163741cb3dbc5ce4d418536ce8f23d20f45a1bb5f38dc2fff07dN.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fbdac84311cd163741cb3dbc5ce4d418536ce8f23d20f45a1bb5f38dc2fff07dN.exe
Resource
win10v2004-20241007-en
General
-
Target
fbdac84311cd163741cb3dbc5ce4d418536ce8f23d20f45a1bb5f38dc2fff07dN
-
Size
52KB
-
MD5
ccf9aae95b99b764ce68c6fca674a4b0
-
SHA1
2c6fabdd888fecaf9d0459a54f814e4975cd2c1d
-
SHA256
fbdac84311cd163741cb3dbc5ce4d418536ce8f23d20f45a1bb5f38dc2fff07d
-
SHA512
bb45e177afe83e158c1bd1989f01e38c0f55ad818a8288d7f85c64bce81105534c5307c6d66b3adb387d80155d7711b9f791ca30948cdc109e77c02bb71e6aaa
-
SSDEEP
768:4AEsH/eq2jT+Aw1X4KgfIWLDyVZbu/hLxVPMu/1H5F/sMMABvKWe:ASZJgQWLDGcJDMUJMAdKZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbdac84311cd163741cb3dbc5ce4d418536ce8f23d20f45a1bb5f38dc2fff07dN
Files
-
fbdac84311cd163741cb3dbc5ce4d418536ce8f23d20f45a1bb5f38dc2fff07dN.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ