forte.rar
- SHA256 878bcc797e495138b1685840f44e9e8980d2574d29e7247eb39f9833889d420f
Password
123
Static task
static1
1 signatures
General
- Target forte.rar
- Size 12.4MB
- Sample261003-p3febsyflc
- SHA256 878bcc797e495138b1685840f44e9e8980d2574d29e7247eb39f9833889d420f
- MD5 85cf430589c049dc4be3bba8c9fb3fed
- SHA1 870d96bf0cadf1efd57f3a8b8c3457cf295bc122
- SHA512 d1e4bcfe2e3a198b43676c05ce7431c6f847e4ed58dc242e06b934c69c5a1f9bf580d7959bd57f07626412f67049dc1e0f204f85bb2dabe4fef25414ef81a0b3
- SSDEEP 196608:kE/Y9jv/e2JRjkLIo5PSBt9vOTrOHf7kR6yL7ouSj58nnUZ0FnSnN7dyraUifS8:7ovsL0Visf7kR6yL7rS+nrNSnh+Fm
- TLSH T1A7D633D7BCF0AC184E1A5280D3DDE2DB1F47B0341A5CF6E9C79C2049AEE109A5697B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/forte.exe
File Explorer
-
forte.rar.rar 12.4MB
-
forte.exe.exe 13.8MB
forte.exe
- IMPHASH a9c887a4f18a3fede2cc29ceea138ed3
- SHA256 a99e1e71178ae8e923a9f0ca8eb831403f46ffb55dc03ac6a05d542b70a41ade
- MD5 403b1c77600c473cb301beb341b83d7f
- SHA1 68715f013468a66eb19a5f1c527a465c682800b5
- SHA512 fd21adb79971bb7a4346a377184e6ac34f535fb841ada7df6ee503e40d382d1d790e76eeaa4243b776678d78de890bc46f08c63733a4c5589032a55648b6b3e5
- SSDEEP 393216:NEU2ztNKXoL2r7IYMEN87Nizz5ckrdyZm9wrT:52zGXoW7IgI+5rIRT
- TLSH T198E6226BE476CC346AC7DA97153940F13C2B2CB88CFD690599FA3591F8892242C7BE71
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
123
Minor OS version
0
Major OS version
4
Entry point
5329
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
msvcrt
malloc
memset
strcmp
strcpy
getenv
sprintf
fopen
fwrite
fclose
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit
shell32
ShellExecuteA
kernel32
SetUnhandledExceptionFilter
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
13.8MB
Virtual Size
13.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
768B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ