Static task
static1
Behavioral task
behavioral1
Sample
fba5d288281ac710fb52a4f7e4d8081bf18e2d68b94eb346d696c5ccf21e9417.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fba5d288281ac710fb52a4f7e4d8081bf18e2d68b94eb346d696c5ccf21e9417.exe
Resource
win10v2004-20241007-en
General
-
Target
fba5d288281ac710fb52a4f7e4d8081bf18e2d68b94eb346d696c5ccf21e9417
-
Size
1.8MB
-
MD5
89ef0f8ccf69682bfa9c423d8bb271fb
-
SHA1
f122c565c7d4773a1c0a62b6665f31b040953c0d
-
SHA256
fba5d288281ac710fb52a4f7e4d8081bf18e2d68b94eb346d696c5ccf21e9417
-
SHA512
f7ca9cfc3eaa3174c30edd6bacdf1c21143c5cb0589283c918a2a0fd74fa0a2ca40cef0cc6c59ca453d6f3004e47b58148d50ec00b21b9e6e48dd1d9c45030c0
-
SSDEEP
49152:GTOJga/aRqKD7zry33SD45E6VnlOM8du6RL+z4:DJ//aY07zrynSce69UX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fba5d288281ac710fb52a4f7e4d8081bf18e2d68b94eb346d696c5ccf21e9417
Files
-
fba5d288281ac710fb52a4f7e4d8081bf18e2d68b94eb346d696c5ccf21e9417.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jvtwhvus Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vzolvsbq Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE