Static task
static1
Behavioral task
behavioral1
Sample
fad1e054eb8f33990d2a36b413323688a60c36eeb7cd1c6816de7160d827ff4cN.exe
Resource
win7-20240903-en
General
-
Target
fad1e054eb8f33990d2a36b413323688a60c36eeb7cd1c6816de7160d827ff4cN.exe
-
Size
2.7MB
-
MD5
9e1a015a00b2699812aedac1ea4e6060
-
SHA1
d3236de3ec97a7cbe724aa5de47ab27ac72f5bdc
-
SHA256
fad1e054eb8f33990d2a36b413323688a60c36eeb7cd1c6816de7160d827ff4c
-
SHA512
086add1bcf765419313e1aaf57fe5fd117bff6295e662da04803ea0ed50756aaada1ffa529a818ff4fdcf07c3c4801d5608143a3c5b48135fa3a670704c9a079
-
SSDEEP
49152:iZ2AarpaRerHQNceyqv8WbEOU/bbmnyLnURNuRbr:iZ2lrkRezQNcedUP8du
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fad1e054eb8f33990d2a36b413323688a60c36eeb7cd1c6816de7160d827ff4cN.exe
Files
-
fad1e054eb8f33990d2a36b413323688a60c36eeb7cd1c6816de7160d827ff4cN.exe.exe windows:5 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 90KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
frvxmalx Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qzfjxbay Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE