Static task
static1
General
-
Target
PrefireP.exe
-
Size
897KB
-
MD5
92b29d0118232120466f2d7a9cd03234
-
SHA1
ab24f39e892ce4ed1690238f2315de992e2f6eb8
-
SHA256
ed07243690fe2f5f4906da69e3062fbb8ecb5529f30caff9546fbf3f47e28899
-
SHA512
7b95d24857f4e8baeb3ca9714a68f54087218e77ab13df7816a5b8a30e44f9fa2b62b69fa31d82188ef377a143f419b97289f901b62e3471fdb77c75e48d1f80
-
SSDEEP
12288:VW46sQiSnttQszutT4fwrzDfdfaiXwRW3eb5yvI/fKBv0:tEHnMszgMaDfdaigA3QMo6s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PrefireP.exe
Files
-
PrefireP.exe.exe windows:6 windows x64 arch:x64
7f4eca14eb9feca759d6d80cc69f6230
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
advapi32
RegQueryValueW
kernel32
GetModuleHandleA
shell32
SHGetDiskFreeSpaceA
user32
DefWindowProcA
Sections
.rsrc Size: - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 403KB - Virtual size: 403KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 493KB - Virtual size: 493KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE