Static task
static1
Behavioral task
behavioral1
Sample
feba87ce9705472598162bc1c0c530ce.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
feba87ce9705472598162bc1c0c530ce.exe
Resource
win10v2004-20231222-en
General
-
Target
feba87ce9705472598162bc1c0c530ce
-
Size
261KB
-
MD5
feba87ce9705472598162bc1c0c530ce
-
SHA1
e3ba73ae7a6c789dc4393ace5618dbfa281a1379
-
SHA256
79e5338e82db76bdafdfbd7c230135b7f06ca4352fee3c17c8fb6950eb06ecb3
-
SHA512
e8c1d4ede875ce7cb724d514b35b698a8639128ef6d10b6bb2fce6ffe8fa36a38f068f582f4dfb5f22ab81e2752ecd6ca72102d87fef913e818bd9221ca0de2d
-
SSDEEP
6144:96aGmgBm3w8gzPjD44e3hJQ8U7OF1sW8dWvYkWGKsHz4wnh:9lP3AzPj84M7QbsfvYov4w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource feba87ce9705472598162bc1c0c530ce
Files
-
feba87ce9705472598162bc1c0c530ce.exe windows:4 windows x86 arch:x86
366e5a38496d9a866e75c30e63b77ba3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
CharLowerA
GetPropA
WindowFromPoint
PtInRect
CloseClipboard
DispatchMessageA
SendMessageA
GetLastActivePopup
InvalidateRect
GetSubMenu
TranslateMDISysAccel
GetKeyboardLayout
GetMenuItemCount
UnregisterClassA
AdjustWindowRectEx
LoadKeyboardLayoutA
FillRect
SetActiveWindow
IsWindowEnabled
DefMDIChildProcA
GetClassNameA
DefFrameProcA
IsWindowVisible
GetWindow
GetKeyboardType
GetMenu
SetScrollInfo
MapWindowPoints
GetFocus
IsRectEmpty
GetScrollInfo
GetKeyboardState
DrawIcon
EnumWindows
IsWindowUnicode
GetKeyboardLayoutList
CallNextHookEx
GetIconInfo
wsprintfA
RemovePropA
InflateRect
GetClassInfoA
DrawMenuBar
FrameRect
IntersectRect
CharLowerBuffA
SetMenu
GetMessagePos
ActivateKeyboardLayout
GetDCEx
MessageBoxA
BeginPaint
IsDialogMessageW
SetMenuItemInfoA
SetWindowLongA
IsZoomed
GetForegroundWindow
GetMenuStringA
GetMenuItemInfoA
IsWindow
CallWindowProcA
GetCursor
MsgWaitForMultipleObjects
EnableMenuItem
InsertMenuA
SetRect
SetPropA
DeleteMenu
RegisterClipboardFormatA
GetSysColor
SetFocus
TranslateMessage
DestroyIcon
IsChild
GetDlgItem
DrawTextA
IsIconic
CreateMenu
GetDesktopWindow
CharToOemA
GetClientRect
DrawAnimatedRects
SetParent
GetSystemMenu
GetClipboardData
GetWindowLongA
InsertMenuItemA
SetClassLongA
GetDC
CheckMenuItem
IsDialogMessageA
GetKeyboardLayoutNameA
GetClassLongA
gdi32
CreateBitmap
SetBkColor
CreateFontIndirectA
GetDIBColorTable
SetBkMode
CopyEnhMetaFileA
GetObjectA
BitBlt
kernel32
SetEndOfFile
SetFilePointer
lstrlenA
GetProcAddress
LoadLibraryA
SizeofResource
GetModuleHandleA
RaiseException
GetCommandLineW
lstrcmpiA
LocalFree
SetHandleCount
VirtualAllocEx
IsBadHugeReadPtr
SetEvent
MoveFileExA
HeapDestroy
ReadFile
lstrcmpA
VirtualAlloc
IsBadReadPtr
VirtualQuery
ResetEvent
GetACP
ExitThread
SetLastError
ExitProcess
SetThreadLocale
GetLastError
lstrcpynA
WaitForSingleObject
WriteFile
WideCharToMultiByte
Sections
.text Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES50 Size: 512B - Virtual size: 181B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES06 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES72 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES18 Size: 1024B - Virtual size: 657B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES45 Size: 512B - Virtual size: 299B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES52 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RES40 Size: 1024B - Virtual size: 913B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RES08 Size: 1024B - Virtual size: 767B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ