Static task
static1
Behavioral task
behavioral1
Sample
FDYKZIV.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
FDYKZIV.exe
Resource
win10v2004-20231215-en
General
-
Target
dfbc1f2f7d19c6e1bf143b4d06d03ce552908f88c1965fbcba8c4a8b7d5ebfee
-
Size
652KB
-
MD5
873ed9d27b9f3de4a2e659ed3cc38904
-
SHA1
f474aa64a6b245512fc4315bdf4497b72ea25ba5
-
SHA256
dfbc1f2f7d19c6e1bf143b4d06d03ce552908f88c1965fbcba8c4a8b7d5ebfee
-
SHA512
0fe79571c300524c64217215a5dd41956b4553ca512ef47922e2c6e6553b515f25eb88dca306ee6425d69f646339f0bbfb2c6efa7ae0bb2e78f1f77a1cb99691
-
SSDEEP
12288:5V4r2/35iswhSxzIt7w9QIv+qZhZWDTD6SJvzkn2+JDFDSHdfJ7rJ5OR3VdK7TdY:5V4ruEswMxq6QIv+uh3St3+LSHBJPzQ9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/FDYKZIV.exe
Files
-
dfbc1f2f7d19c6e1bf143b4d06d03ce552908f88c1965fbcba8c4a8b7d5ebfee.zip
-
FDYKZIV.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 940KB - Virtual size: 940KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ