Static task
static1
Behavioral task
behavioral1
Sample
feefce47445cb786241f67f0b9c3673c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
feefce47445cb786241f67f0b9c3673c.exe
Resource
win10v2004-20231215-en
General
-
Target
feefce47445cb786241f67f0b9c3673c
-
Size
18KB
-
MD5
feefce47445cb786241f67f0b9c3673c
-
SHA1
72e6920caecdf8d653dd48288ea53088d9b01329
-
SHA256
6af5e4b9c77786138b70c176c3fa9858339d23e1e399f0bce1f9155ae2a7e211
-
SHA512
a128174a96fe71b236ffe74468d490860af8efc0d7f7ccebc34d7c65798d76f855377307acd6b64674b6b3c79d37af41866a3f280e27fbc530cd96d1c10f194b
-
SSDEEP
192:0nHUnGUQCG5L/z6WkY4PmpxPMoYAS2A3URj2Hjy6LTs1kg+r7S:0HJURGdz6w4KxPMoYeASp6nrg+rG
Malware Config
Signatures
Files
-
feefce47445cb786241f67f0b9c3673c.exe windows:4 windows x86 arch:x86
844db254f32a9d78fbfff2591b7d4b58
Code Sign
4a:e1:51:8d:ec:16:7b:80:4b:a3:aa:af:7a:47:17:26Certificate
IssuerCN=RaawiwiwiriNot Before31/12/2010, 22:00Not After31/12/2039, 23:59SubjectCN=Raawiwiwiri80:23:6c:05:dc:7d:7b:54:06:55:40:be:c4:46:77:e9:66:42:43:95Signer
Actual PE Digest80:23:6c:05:dc:7d:7b:54:06:55:40:be:c4:46:77:e9:66:42:43:95Digest Algorithmsha1PE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetSystemDirectoryA
GetModuleHandleA
Sleep
GetLastError
GetCurrentProcess
GetCommandLineA
ExitProcess
LoadLibraryA
user32
KillTimer
LoadCursorA
LoadImageA
PostQuitMessage
RegisterClassExA
SetTimer
TranslateMessage
GetMessageA
EndPaint
DispatchMessageA
DefWindowProcA
CreateWindowExA
BeginPaint
GetClientRect
gdi32
CreateCompatibleDC
DeleteDC
GetObjectA
SelectObject
BitBlt
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 812B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 332B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 256B - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE