Static task
static1
Behavioral task
behavioral1
Sample
fe7a795a43c5fcc815ef2489bf3fc771b63a4961f1ca595cbaa85126fd0cbc74.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe7a795a43c5fcc815ef2489bf3fc771b63a4961f1ca595cbaa85126fd0cbc74.exe
Resource
win10v2004-20240508-en
General
-
Target
fe7a795a43c5fcc815ef2489bf3fc771b63a4961f1ca595cbaa85126fd0cbc74
-
Size
12.3MB
-
MD5
94d438bcba1b51038387fefa1bc26273
-
SHA1
46104ced3c750dc23ad1bd49f81635c4bcb13107
-
SHA256
fe7a795a43c5fcc815ef2489bf3fc771b63a4961f1ca595cbaa85126fd0cbc74
-
SHA512
6682753b491b70a197211d99719075393603ff4ba56fa03efd48628b00dfdec5c99baa5bf0c6f08378d4de92085f8415444ba1c3b943d7001ffd9c456c5e2055
-
SSDEEP
393216:mll4XOkXzryjgs5QSkUWrtKeljTMvcC1z9qrr85mP:XXHigsm7lxTljTdDV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe7a795a43c5fcc815ef2489bf3fc771b63a4961f1ca595cbaa85126fd0cbc74
Files
-
fe7a795a43c5fcc815ef2489bf3fc771b63a4961f1ca595cbaa85126fd0cbc74.exe windows:4 windows x86 arch:x86
d87cd808bc19f773fe6b0327fde9a185
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
kernel32
SetCurrentDirectoryA
user32
GetCursorPos
gdi32
RestoreDC
winmm
waveOutRestart
winspool.drv
DocumentPropertiesA
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
VariantClear
comctl32
ImageList_Destroy
ws2_32
inet_ntoa
wininet
HttpQueryInfoA
comdlg32
GetSaveFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 11.3MB - Virtual size: 11.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ