Static task
static1
Behavioral task
behavioral1
Sample
fec0a4c747756d3dc1feb89f1bd9844b68cd8bcd8347ec458145cebcf6db3945.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
fec0a4c747756d3dc1feb89f1bd9844b68cd8bcd8347ec458145cebcf6db3945.exe
Resource
win11-20240426-en
General
-
Target
fec0a4c747756d3dc1feb89f1bd9844b68cd8bcd8347ec458145cebcf6db3945
-
Size
1.9MB
-
MD5
9c112b2006b2b0234f2f98e6ccb04222
-
SHA1
8f0d3e3701b0230bce7d184fc9e417252445765b
-
SHA256
fec0a4c747756d3dc1feb89f1bd9844b68cd8bcd8347ec458145cebcf6db3945
-
SHA512
59316dfd6ceccbdc8a5aa66268819a4da0cb2f562f99580a1fe4fd7c2327a9a17614a494e71c2de4ffc5d4efe3c01136991bb2dc404b9ca18ee3e7e6c8229452
-
SSDEEP
49152:811BaOmdeZmHLkN9H9JTglkk3qSKzKMz35wr9pwxwfbJrv:4B3mdeZsU9dJukk38KW35OhfNj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fec0a4c747756d3dc1feb89f1bd9844b68cd8bcd8347ec458145cebcf6db3945
Files
-
fec0a4c747756d3dc1feb89f1bd9844b68cd8bcd8347ec458145cebcf6db3945.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 183KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
azochpcc Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xalloxkq Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE