Static task
static1
Behavioral task
behavioral1
Sample
Fkveu.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Fkveu.exe
Resource
win10v2004-20230703-en
General
-
Target
Fkveu.exe
-
Size
312KB
-
MD5
b9ef743e10f10a12ae687d6aaf32d7ba
-
SHA1
666caafe83d64b59f523584af54707d09fd72ba7
-
SHA256
61f66e029f94585a6456cc48d4663e91d1eeabf1dadc1f39236fc8c754673473
-
SHA512
8a44fa5758e68b3f33da81ec9c0c594c43fbb38938f1ab6f9dc55ee7328d87781de8b13a6df9a40dd1ccd00f5833ce14fe6a9ef63455de805290e676ac3583df
-
SSDEEP
6144:JlM8sTFiVlqVC30VHrHpaBXkRVcRBlPYmWB8rkkdRDmE3mslGsizM0QyFw9O:JlM8sZivqVCEBrJaBXkYVYmWKozM0Qm4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Fkveu.exe
Files
-
Fkveu.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 289KB - Virtual size: 289KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ