Static task
static1
Behavioral task
behavioral1
Sample
fdccf6138b05763809a18adc03cf78dd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fdccf6138b05763809a18adc03cf78dd.exe
Resource
win10v2004-20231215-en
General
-
Target
fdccf6138b05763809a18adc03cf78dd
-
Size
112KB
-
MD5
fdccf6138b05763809a18adc03cf78dd
-
SHA1
7551674cdf7fa88a6c6748d97cbff0d264ec46e2
-
SHA256
e9da553e34c5c81ee56a095d3cc7944447e3bf066c1c537b3c9357aec722b288
-
SHA512
be22615851695b6a3a7f8e0f5af79b2158e1fbd9a483ace9727422b215de78463fbdca845a3f5f17cc5e382bd6372f3fa24bcf7590f4020823788993502da623
-
SSDEEP
1536:bL4lkq1a3Sbxy+XbMZ6TIO1RptMQtsT8A/ueoG9aPVA9/CXvV08U:bLXqv1Hbw6TIDQtetuE9aEaXve8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdccf6138b05763809a18adc03cf78dd
Files
-
fdccf6138b05763809a18adc03cf78dd.exe windows:4 windows x86 arch:x86
22eb6ff485935f6ae57f240c65ba60b8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetParent
CharNextA
GetSystemMetrics
GetDesktopWindow
TranslateMessage
gdi32
GetTextMetricsA
SetMapMode
CreatePen
SetTextAlign
PatBlt
LineTo
SetPixel
GetObjectA
GetPixel
CreateFontIndirectA
CreateCompatibleDC
SetTextColor
CreateSolidBrush
RectVisible
DeleteDC
SelectObject
DeleteObject
GetDeviceCaps
CreatePalette
GetStockObject
GetClipBox
SaveDC
SetStretchBltMode
SelectPalette
RestoreDC
kernel32
GetVersion
GetACP
RemoveDirectoryW
GetTickCount
DeleteFileA
lstrcmpiA
IsDebuggerPresent
GetDriveTypeA
GetProcessHeap
lstrcmpiW
QueryPerformanceCounter
GlobalFindAtomW
GetConsoleOutputCP
GetOEMCP
lstrlenA
GetCurrentProcessId
GetCommandLineW
GetWindowsDirectoryA
GetUserDefaultLangID
lstrcmpA
GetStartupInfoA
GetCurrentThread
GetModuleHandleW
GetThreadLocale
SetCurrentDirectoryA
RemoveDirectoryA
CopyFileA
DeleteFileW
GlobalFindAtomA
GetCurrentThreadId
VirtualAlloc
GetModuleHandleA
VirtualFree
lstrlenW
GetCommandLineA
MulDiv
GetCurrentProcess
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ