Static task
static1
Behavioral task
behavioral1
Sample
fe6de2c9ce56f77964a507e7ff5ce07c37215cde8d10c42af2ace4ab059baecf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fe6de2c9ce56f77964a507e7ff5ce07c37215cde8d10c42af2ace4ab059baecf.exe
Resource
win10v2004-20240426-en
General
-
Target
fe6de2c9ce56f77964a507e7ff5ce07c37215cde8d10c42af2ace4ab059baecf
-
Size
15.1MB
-
MD5
fdb103510e3d8aaceb9a9ed7d799a647
-
SHA1
b2a32730a2f65540840f4bd3f2c576d89a0d921a
-
SHA256
fe6de2c9ce56f77964a507e7ff5ce07c37215cde8d10c42af2ace4ab059baecf
-
SHA512
6a8508098a68478d9aa2c3fc4e17ad9a958c11a7d3524125fd0a3a3f9de90569896fb0ae2a1d49f9111c7ebe4f6f6a3842025fa5019ca14cc2967fda1451b755
-
SSDEEP
393216:RFIgZqFa1tkFVjKJleTzmSnxMeX0MX6bYt:R27YYnxxMeX0C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe6de2c9ce56f77964a507e7ff5ce07c37215cde8d10c42af2ace4ab059baecf
Files
-
fe6de2c9ce56f77964a507e7ff5ce07c37215cde8d10c42af2ace4ab059baecf.exe windows:4 windows x86 arch:x86
e250b2b1f5aaa6cb20adb5fa9f32e64a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
ExitWindowsEx
advapi32
CreateServiceW
Sections
Size: - Virtual size: 14.5MB
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE