Static task
static1
Behavioral task
behavioral1
Sample
8481907fdde775205d32c49445800ade46667080b096b95bb88717816dd6fe0e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8481907fdde775205d32c49445800ade46667080b096b95bb88717816dd6fe0e.exe
Resource
win10v2004-20240611-en
General
-
Target
8481907fdde775205d32c49445800ade46667080b096b95bb88717816dd6fe0e
-
Size
588KB
-
MD5
cd03fdc9fc04a9fbdd3cff4d751ecb3c
-
SHA1
870173a7ff6232fb4eedf7145ef29fded6066505
-
SHA256
8481907fdde775205d32c49445800ade46667080b096b95bb88717816dd6fe0e
-
SHA512
26e649dbd028abb3134368dcb59d40b42cbeecb769269e25ae46451a28705f9e3562a3750d55756ad91b3961530969314500939fd60098c96b9d1ae94cd1a8e7
-
SSDEEP
12288:ewHwAsQug0z6to5Ac7dcj+jBoAVCs4kBVhj8o98eyxZ1cnnK0F9embnuQbv0f:dRupz6cFdZjS/s4kyR1SKs9hbPbv0f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8481907fdde775205d32c49445800ade46667080b096b95bb88717816dd6fe0e
Files
-
8481907fdde775205d32c49445800ade46667080b096b95bb88717816dd6fe0e.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
.ficken Size: 447KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ficken Size: 64KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ficken Size: 37KB - Virtual size: 456KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ficken Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE