Static task
static1
Behavioral task
behavioral1
Sample
fc018c0a6f71e6680d8a77bf0800ddc6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fc018c0a6f71e6680d8a77bf0800ddc6.exe
Resource
win10v2004-20231215-en
General
-
Target
fc018c0a6f71e6680d8a77bf0800ddc6
-
Size
99KB
-
MD5
fc018c0a6f71e6680d8a77bf0800ddc6
-
SHA1
ace18d6e89b5eecb0992e9266042ac5a01324682
-
SHA256
e4356f580713cd3bac539748afbe1947dbb324fd58acd033b6a916d35dc37daa
-
SHA512
928fabc1bddcecb98c5eb9433221293a9527b098e395593acbce8c5bd654cdcac0dec8c91d4eb80270ea32cc72f7e231f9d433e3378755fe9ae6062372e738b7
-
SSDEEP
1536:woUbHteY3nB28tpZcAIB1CXYIgBJKcwg37Xy+FYfCFacWoTSQUukibKsw5Hmh:woOegg876z1XvKTwi+afIacjfkibXC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc018c0a6f71e6680d8a77bf0800ddc6
Files
-
fc018c0a6f71e6680d8a77bf0800ddc6.exe windows:4 windows x86 arch:x86
570fab30d76eae35843bff94e696b552
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetTextColor
SaveDC
CreatePen
GetObjectA
RestoreDC
SetTextAlign
GetDeviceCaps
DeleteDC
GetPixel
CreateCompatibleDC
GetStockObject
SelectObject
PatBlt
SetMapMode
GetClipBox
SetStretchBltMode
LineTo
CreateSolidBrush
RectVisible
CreateFontIndirectA
GetTextMetricsA
SelectPalette
CreatePalette
DeleteObject
GetNearestPaletteIndex
user32
TranslateMessage
GetParent
GetDesktopWindow
CharNextA
GetSystemMetrics
GetDC
kernel32
QueryPerformanceCounter
RemoveDirectoryA
SetCurrentDirectoryA
GetModuleHandleA
GetProcessHeap
lstrlenA
GetVersion
GlobalFindAtomW
lstrcmpA
GetCurrentProcessId
GetModuleHandleW
GetWindowsDirectoryA
DeleteFileW
VirtualAlloc
GetCurrentThread
CopyFileA
lstrcmpiA
lstrlenW
DeleteFileA
GetCurrentProcess
MulDiv
GetUserDefaultLangID
GetThreadLocale
GlobalFindAtomA
GetACP
IsDebuggerPresent
GetStartupInfoA
GetConsoleOutputCP
GetOEMCP
GetCurrentThreadId
GetDriveTypeA
lstrcmpiW
GetTickCount
GetCommandLineW
RemoveDirectoryW
GetCommandLineA
ExitProcess
glu32
gluQuadricCallback
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ