Static task
static1
Behavioral task
behavioral1
Sample
fdruey.exe
Resource
win7-20240220-en
General
-
Target
fdruey.exe
-
Size
100KB
-
MD5
240c38e82838ec1ab2d6550c12bae605
-
SHA1
6d7aeab195ff9bffce7c46dc51639b2ee6bd02ba
-
SHA256
8212ffd9d60e4e1d423312177f55d517faf6130bc6f95c1b066b62061c3caacc
-
SHA512
5016359bfe74460b31c17757987f7461c4a7e5583af6554e293c1370f7082be6aa564700a57c5d4784db682e498f9424058a0bd5190ffe62edb27f92b6b58d8a
-
SSDEEP
1536:jFACCh16CBJVUxg5irgqMX/JjHG85PAHkIXvU5Auoj1vBd78QjaDqSVuNT6r6:561VlxDfAECqALjD/DNOr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdruey.exe
Files
-
fdruey.exe.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE