Static task
static1
Behavioral task
behavioral1
Sample
fcbf6460a93b0612b703f2c29b1e2e02.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fcbf6460a93b0612b703f2c29b1e2e02.exe
Resource
win10v2004-20231215-en
General
-
Target
fcbf6460a93b0612b703f2c29b1e2e02
-
Size
254KB
-
MD5
fcbf6460a93b0612b703f2c29b1e2e02
-
SHA1
aaf5756460ba27504bf21e9237d514cdef96726c
-
SHA256
3c00bfe3c75372e4feedd0d2a45461b90e86716cc76bb6ac986ffc4a218e4266
-
SHA512
48b5d7747ec9d67c2703c8de6e3d15be4e28d006a52ba83786ba616ceb9ca530eecfaa82cc0a51a2d40e9d3aabf03a7db58a01cab37eceb4b34408716a9132db
-
SSDEEP
3072:8/w6gCmvZZ1g9nTR61F/tNnr4U7BRScmJ8Re1YBRyD+4KABiQ3AwZI9tBkPL/Z27:awVhk8cgSVLaGD8bQNZqU/Zq7Pmyjrx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcbf6460a93b0612b703f2c29b1e2e02
Files
-
fcbf6460a93b0612b703f2c29b1e2e02.exe windows:4 windows x86 arch:x86
6ad2f82b8ad02523c94a5d495b2dab38
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
PatBlt
GetObjectW
CreateDCW
CreateSolidBrush
SelectObject
CreateCompatibleBitmap
DeleteDC
CreateCompatibleDC
DeleteObject
kernel32
LeaveCriticalSection
HeapFree
IsDebuggerPresent
LockResource
EnterCriticalSection
lstrcmpiW
HeapSize
GetModuleHandleW
CreateFileW
RaiseException
GetFileSize
SystemTimeToTzSpecificLocalTime
DeleteCriticalSection
FindClose
LocalAlloc
FindFirstFileW
lstrlenW
GetTimeZoneInformation
FormatMessageW
UnhandledExceptionFilter
EnumResourceNamesW
SizeofResource
GetCurrentThreadId
FindResourceExW
GetSystemTime
LoadResource
FindResourceW
HeapDestroy
LocalFree
HeapAlloc
GetSystemTimeAsFileTime
ReadFile
SetUnhandledExceptionFilter
OutputDebugStringW
FreeLibrary
ProcessIdToSessionId
GetProcessHeap
CloseHandle
HeapReAlloc
SystemTimeToFileTime
LoadLibraryExW
CompareFileTime
VirtualAllocEx
ole32
CoTaskMemRealloc
CoCreateGuid
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
oleaut32
VarUI4FromStr
user32
CharNextW
GetForegroundWindow
AllowSetForegroundWindow
DestroyIcon
GetSystemMetrics
GetDesktopWindow
DrawIconEx
GetActiveWindow
LoadImageW
esent
JetFreeBuffer
JetCloseFile
JetDupCursor
JetGetDatabaseFileInfo
JetCreateDatabase2
JetMakeKey
JetCreateInstance
JetDefragment
JetSetLS
JetOpenTempTable3
JetAddColumn
JetInit2
JetEnumerateColumns
JetTerm2
JetDeleteIndex
JetMove
ese
wmpshell
DllRegisterServer
DllCanUnloadNow
Sections
.YolX Size: 1KB - Virtual size: 27KB
IMAGE_SCN_MEM_READ
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UrnGiP Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.awBQJUL Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.slUCrgA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.GdUqi Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 208KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fvTRZ Size: 1024B - Virtual size: 790B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mHTN Size: 512B - Virtual size: 396B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.GjQNcMz Size: 512B - Virtual size: 266B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ZJhdvo Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sIVhg Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE