Static task
static1
Behavioral task
behavioral1
Sample
FeatherEXC.rar
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
FeatherEXC.rar
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
FeatherEXC/Feather.exe
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
FeatherEXC/Feather.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
FeatherEXC/Injector.exe
Resource
win7-20240419-en
Behavioral task
behavioral6
Sample
FeatherEXC/Injector.exe
Resource
win10v2004-20240611-en
General
-
Target
FeatherEXC.rar
-
Size
567KB
-
MD5
ce8d56ab04907fced6ba9bd15486b951
-
SHA1
c1b07332aa12b41e5a6d08f7548f5272b482f1a3
-
SHA256
8e7b8a11300932dd0cc630d72e28a743f5c05406ea9a4d126f16367fd07a273c
-
SHA512
09b7e969e6beb43f23857cfa60959cbc9859f62c7a63ff6f8d01cdfe85a104779d8d0ae987e78c9af49a7c034905b93c0082978c84eb4b0e715f55e5cf80e77d
-
SSDEEP
12288:t/5yZziD9/Ji95wcgnRRWnm1VjYB///5yZziD9/Ji95wcg6IH+gpfWzC:t/5ygjiwcgnRHs///5ygjiwcgJ+gpfiC
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/FeatherEXC/Feather.exe unpack001/FeatherEXC/Injector.exe
Files
-
FeatherEXC.rar.rar
-
FeatherEXC/Feather.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 485KB - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
FeatherEXC/Injector.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
Imports
mscoree
_CorExeMain
Sections
.text Size: 485KB - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ