Static task
static1
Behavioral task
behavioral1
Sample
Fkndw.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Fkndw.exe
Resource
win10v2004-20231215-en
General
-
Target
Chase EFT 0284876529400477201801 pdf.rar
-
Size
25KB
-
MD5
c92dda6a61224e87d67eb2fc1248ec43
-
SHA1
ab6605e9fd2a06d788106cc42390bb2fc72c15fe
-
SHA256
c7cd51915ade5d3f47bf9f3578be9cfd3d1e33b8b2a5335f5397d0b3ccb3b86e
-
SHA512
77d8e80d146dce064f1c4a207db581392184d5cefb30bebf46148480cacf1c75f168d29453b5b03881cd86d3c3220b7353bc71195447f1ff251a9b170d3c4122
-
SSDEEP
384:6ZeCyfvejKcZx6fiWc6DRU2r1KtLlIZ0EGz5iOp4NqPXgudSAro7yb4n+fWr7H99:S9KcZk6cdU2r1ILHEwpRs+o7yIT99
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Fkndw.exe
Files
-
Chase EFT 0284876529400477201801 pdf.rar.rar
-
Chase EFT 0284876529400477201801 pdf.img.iso
-
Fkndw.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ