Static task
static1
Behavioral task
behavioral1
Sample
fcf1aaff7ac366328deab17c30bfb368bee935ebc71a8553a3b9362c10ead39d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fcf1aaff7ac366328deab17c30bfb368bee935ebc71a8553a3b9362c10ead39d.exe
Resource
win10v2004-20240226-en
General
-
Target
fcf1aaff7ac366328deab17c30bfb368bee935ebc71a8553a3b9362c10ead39d
-
Size
4.6MB
-
MD5
61d18296fbf4499fe326766aa5ec6f55
-
SHA1
a56a4a9ff443d4c4f24a678177cf8732e2fc8388
-
SHA256
fcf1aaff7ac366328deab17c30bfb368bee935ebc71a8553a3b9362c10ead39d
-
SHA512
616b8b856b3fd2a5ff4c896b07e87f76f3ea291bbe780e9eee29f12e8cd373f62d28e09239b0c622100f66b2bd20fe7f774b6f98bb461ebbfd64b3ed5bdfe2b1
-
SSDEEP
98304:V7nqqaYBYU48nw0uLQNcaXnNNj+d/pRsG1UzsZsOl4KS/eXu:jaQjDnUQNrnq/T51Uo2g4KS/eXu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcf1aaff7ac366328deab17c30bfb368bee935ebc71a8553a3b9362c10ead39d
Files
-
fcf1aaff7ac366328deab17c30bfb368bee935ebc71a8553a3b9362c10ead39d.exe windows:4 windows x86 arch:x86
a2de50014a13b6e394b659062702924a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamGetFrame
iphlpapi
GetAdaptersInfo
winmm
midiStreamRestart
ws2_32
inet_addr
rasapi32
RasHangUpA
kernel32
QueryPerformanceFrequency
user32
GetSysColorBrush
gdi32
CreateSolidBrush
winspool.drv
DocumentPropertiesA
comdlg32
ChooseColorA
advapi32
RegCreateKeyExA
shell32
DragQueryFileA
ole32
CLSIDFromProgID
oleaut32
VariantChangeType
comctl32
ImageList_DragMove
wininet
InternetCloseHandle
msvcrt
strncpy
psapi
GetMappedFileNameW
Sections
.text Size: 3.5MB - Virtual size: 5.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Dream Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Dream Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ