Static task
static1
Behavioral task
behavioral1
Sample
fcbbe11c75fa7de7aa2953adbb8e9b31.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fcbbe11c75fa7de7aa2953adbb8e9b31.exe
Resource
win10v2004-20231215-en
General
-
Target
fcbbe11c75fa7de7aa2953adbb8e9b31
-
Size
390KB
-
MD5
fcbbe11c75fa7de7aa2953adbb8e9b31
-
SHA1
b1c93bd00ecf26416c626b92332eff917b1e3a8d
-
SHA256
75ecafb8d60a4606eed28a2cafbd4264d6c89bb293530a481c87661221dca75a
-
SHA512
b9b0381f049c53d6e51f1519f3b9e13e8b79a55c013e3932f82c7a56c124b9df4fa85d6f5ab3a483ad7e0ac7a10feb130d9e4b65cddc49524c23818108e6de48
-
SSDEEP
12288:knBwmJldhAIVZTnAZHtpGSPDCO8ln4QxaX/98N:iwUAanAXrGO8ln1xq8N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcbbe11c75fa7de7aa2953adbb8e9b31
Files
-
fcbbe11c75fa7de7aa2953adbb8e9b31.exe windows:4 windows x86 arch:x86
0dacf2c2ecfcfb68b66b7e64b0987ed6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetStdHandle
GetLocaleInfoA
EnumResourceTypesW
FormatMessageA
GetCurrentThread
GetNamedPipeInfo
HeapAlloc
VirtualFree
MultiByteToWideChar
HeapSize
TlsAlloc
ContinueDebugEvent
GlobalSize
SetFileAttributesA
LCMapStringW
LeaveCriticalSection
EnumDateFormatsExW
GetEnvironmentStringsW
GetFileType
ReadFileEx
IsValidLocale
DeleteCriticalSection
GetLastError
EnterCriticalSection
GetModuleFileNameW
GetStartupInfoA
SetLastError
GetEnvironmentStrings
GetProcAddress
GlobalUnlock
GetDateFormatA
TlsSetValue
lstrcpyA
CompareStringW
GetTempPathW
GetStdHandle
VirtualQuery
HeapDestroy
TlsGetValue
IsBadWritePtr
SetCurrentDirectoryA
GetStringTypeW
SetHandleCount
GetCommandLineA
HeapReAlloc
HeapCreate
ExitProcess
CopyFileExA
GetAtomNameW
VirtualAlloc
UnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcess
GetTimeZoneInformation
GetModuleHandleA
FreeEnvironmentStringsW
GetSystemInfo
GetTimeFormatA
GetCurrentThreadId
IsValidCodePage
WideCharToMultiByte
CompareStringA
GetACP
GetCurrentProcessId
GetModuleFileNameA
GetUserDefaultLCID
OpenMutexA
GetProfileSectionW
GetTickCount
GetOEMCP
GetSystemDefaultLCID
FreeEnvironmentStringsA
LCMapStringA
InitializeCriticalSection
RtlUnwind
EnumSystemLocalesA
GetSystemTimeAsFileTime
InterlockedExchange
GetVersionExA
VirtualProtectEx
SetEnvironmentVariableA
GetCPInfo
WriteFile
GetLocaleInfoW
GetStringTypeA
HeapFree
TerminateProcess
LoadLibraryA
SetConsoleMode
TlsFree
VirtualProtect
user32
MenuItemFromPoint
RegisterClassExA
AttachThreadInput
SendIMEMessageExA
RemovePropA
GetClipboardViewer
GetParent
SetSystemCursor
EnumPropsW
VkKeyScanA
GetWindowTextLengthW
GetMenuItemInfoW
EndDeferWindowPos
CreateIcon
CallNextHookEx
LoadIconW
OpenWindowStationW
GetQueueStatus
DefDlgProcA
IsDlgButtonChecked
ChildWindowFromPointEx
LoadMenuIndirectA
InsertMenuItemA
DdeCmpStringHandles
comdlg32
FindTextA
GetOpenFileNameA
ChooseColorW
ReplaceTextA
GetSaveFileNameW
FindTextW
LoadAlterBitmap
PageSetupDlgA
GetOpenFileNameW
ChooseColorA
PageSetupDlgW
ReplaceTextW
PrintDlgW
GetSaveFileNameA
gdi32
GetPixelFormat
GetTextColor
SetSystemPaletteUse
GdiSetBatchLimit
CloseMetaFile
RectVisible
GetCharABCWidthsW
EqualRgn
PaintRgn
CreateEnhMetaFileA
SetICMProfileW
GetTextExtentExPointW
UpdateICMRegKeyA
GetCharacterPlacementA
GetLogColorSpaceW
GetMetaRgn
GetOutlineTextMetricsA
GetRegionData
FixBrushOrgEx
GetDCOrgEx
FillRgn
GetTextExtentPoint32W
PolyDraw
CopyMetaFileW
CreateHalftonePalette
Sections
.text Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 272KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ