Static task
static1
Behavioral task
behavioral1
Sample
fe5c08e8378688b2b69d66613e6ba4012fb2d63722e4b7149d60e5407c233b36.exe
Resource
win7-20240903-en
General
-
Target
fe5c08e8378688b2b69d66613e6ba4012fb2d63722e4b7149d60e5407c233b36
-
Size
48KB
-
MD5
549a435cada3f29b49b6bfac370efa3d
-
SHA1
83883ecdf5ccbba9c6fe3cc3a8381ae198a4b8d4
-
SHA256
fe5c08e8378688b2b69d66613e6ba4012fb2d63722e4b7149d60e5407c233b36
-
SHA512
1605784ccbe1e3078bb0059fd47318dd014e49f1ef88e6de9b74c94bc5ae37d803c49967aef77c8a9fa7611b5cb28a32f791b91c81c853043a2cb0e4076efe1f
-
SSDEEP
1536:mAocdpeVoBDulhzHMb7xNAa04Mcg5IKvu:0cdpeeBSHHMHLf9RyIP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe5c08e8378688b2b69d66613e6ba4012fb2d63722e4b7149d60e5407c233b36
Files
-
fe5c08e8378688b2b69d66613e6ba4012fb2d63722e4b7149d60e5407c233b36.exe windows:4 windows x86 arch:x86
9dacd5fc505421be83fd9ef325d44b59
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
atoi
shlwapi
PathFileExistsA
user32
wsprintfA
Sections
.MPRESS1 Size: 39KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE