Static task
static1
Behavioral task
behavioral1
Sample
fd90ef64632059850112b9642f22171d40b9d7001f5b498a81061c2d3def7d78.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
fd90ef64632059850112b9642f22171d40b9d7001f5b498a81061c2d3def7d78.exe
Resource
win10v2004-20230703-en
General
-
Target
fd90ef64632059850112b9642f22171d40b9d7001f5b498a81061c2d3def7d78
-
Size
3.9MB
-
MD5
277852c084709b62dae8cff4c39cb25c
-
SHA1
e058dc66fd55119eec9dad81cd8aae0f3c1ad739
-
SHA256
fd90ef64632059850112b9642f22171d40b9d7001f5b498a81061c2d3def7d78
-
SHA512
f1462d1ebb250923c022259b0275f83052965542df037df5ebf6aa36e63c92b4def64ce3351d7dfb9bdb004536ea07acd68213a9b96da409d21579c5d1ad20b8
-
SSDEEP
98304:ePxWJrahVNAgg1baTs/xXasa5HZ8Cfu3JYhu:VKAg0Bs8au
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd90ef64632059850112b9642f22171d40b9d7001f5b498a81061c2d3def7d78
Files
-
fd90ef64632059850112b9642f22171d40b9d7001f5b498a81061c2d3def7d78.exe windows x86
7d822e703163f50bbd66f901ffaa8e88
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
SetFilePointer
CreateFileA
ReadFile
GetLastError
WriteFile
GetProcessHeap
HeapFree
lstrcpyA
GetFileAttributesA
lstrlenA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
CloseHandle
DosDateTimeToFileTime
CreateDirectoryA
RemoveDirectoryA
GetModuleFileNameA
ExitProcess
GetModuleHandleA
HeapAlloc
SearchPathA
WaitForSingleObject
CreateProcessA
GetSystemDirectoryA
GetWindowsDirectoryA
GetCurrentDirectoryA
GetTempPathA
lstrcmpiA
lstrcatA
SetCurrentDirectoryA
user32
SendMessageA
GetDlgItem
MessageBoxA
PeekMessageA
CharNextA
LoadStringA
CharPrevA
CreateDialogParamA
DestroyWindow
shell32
ShellExecuteExA
comctl32
ord17
Sections
.text Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 298B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ