Static task
static1
Behavioral task
behavioral1
Sample
Pecxxgetfb.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
Pecxxgetfb.exe
Resource
win10v2004-20231215-en
General
-
Target
a30b5525296e02375eb287ab790e37a6.bin
-
Size
1.4MB
-
MD5
4d57c2b39e3525a50cc356450c058390
-
SHA1
c5bec37b1705c35a47b8ee3061c3a7412b5db8d2
-
SHA256
04fd82164a3ec4a31cc8d06b3d6352ec662c73f5631446ceabfdb1e685854be5
-
SHA512
665b5f55b7e60a84270ac0270a8cd87b562c9cef8f61d93fb280521b2b9fb4db3e660667db606d4f0bcf5ca9c0bf85d2afdae37b72d750bb9c94cd8c0ecea2fc
-
SSDEEP
24576:XG26lo1aRfaTVP0aX0b85F7OD+03I3+fAupEVqnbloypV9SiRx4J8MHMTeoxLsEg:zoo1aRYN0w5F7OX3S+z68bloCTSizCH/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack003/Pecxxgetfb.exe
Files
-
a30b5525296e02375eb287ab790e37a6.bin.zip
Password: infected
-
780c8d2593bc7d79e1ed751173c10b942561ad339d7f22faa8a9ec7fa4a121fb.rar.rar
Password: infected
-
SOA 8400139526XXFEB024.img.iso
Password: infected
-
Pecxxgetfb.exe.exe windows:4 windows x64 arch:x64
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ