Static task
static1
Behavioral task
behavioral1
Sample
FierroLoader/FierroLoader.pack.hxd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
FierroLoader/FierroLoader.pack.hxd.exe
Resource
win10v2004-20231215-en
General
-
Target
24205286988c3801a0dee774e2f9c72a
-
Size
2.9MB
-
MD5
24205286988c3801a0dee774e2f9c72a
-
SHA1
886f72af3e235afb3f786df0b90817b478b09edb
-
SHA256
8b15bcf38a78a4406702dd1d70cd86e717e26d45c8a158237604eda655039ae1
-
SHA512
75540f33679b7fe6f4a19e65a87db840d588a63b7157ea0336d4b89c2ad5409d4a7ddf1911900eb5233a428d238030c27569e07fdf9508c838f2b8d458a4c27a
-
SSDEEP
49152:QAXpZ7bW94VrV8XBq1y8UbLx9BYKu0KRdChurw92gY0JZFJ2avngUZLlCLF:7Xppby4Z2XOy8EH+KuDZs9X1J/hLlCLF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/FierroLoader/FierroLoader.pack.hxd.exe
Files
-
24205286988c3801a0dee774e2f9c72a.zip
-
FierroLoader/FierroLoader.pack.hxd.exe.exe windows:6 windows x64 arch:x64
10ecea9f095bd0b1692953865e9f6b75
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetVolumeInformationW
GetCurrentProcess
LocalAlloc
GetCurrentProcess
GetCurrentThread
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
GetLastError
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SetForegroundWindow
CharUpperBuffW
shell32
SHGetFolderPathW
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
winhttp
WinHttpReceiveResponse
urlmon
URLDownloadToFileA
vcruntime140
__std_exception_copy
api-ms-win-crt-runtime-l1-1-0
_configure_narrow_argv
api-ms-win-crt-stdio-l1-1-0
_set_fmode
api-ms-win-crt-heap-l1-1-0
calloc
api-ms-win-crt-convert-l1-1-0
_wtoi
api-ms-win-crt-string-l1-1-0
_wcslwr_s
api-ms-win-crt-filesystem-l1-1-0
_stat64i32
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
wtsapi32
WTSSendMessageW
advapi32
RegQueryValueExA
OpenSCManagerW
EnumServicesStatusExW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
Sections
.text Size: - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.radata0 Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.radata1 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
FierroLoader/If Instruction Error.png.png
-
FierroLoader/! .txt
-
FierroLoader// ᭮.txt
-
FierroLoader//訡 ᪥, ࠡ .txt
-
FierroLoader// .txt
-
FierroLoader// - FAQ.txt
-
FierroLoader/ - Manual.txt
-
FierroLoader/ ⪫ ⭨ Windows.jpg.jpg