Static task
static1
Behavioral task
behavioral1
Sample
feb057d05a6585f45721b2c531f4908804c121dcd54b6c14bcc00b83c69ade8b.exe
Resource
win7-20240903-en
General
-
Target
feb057d05a6585f45721b2c531f4908804c121dcd54b6c14bcc00b83c69ade8b
-
Size
14.5MB
-
MD5
2825df35076aa5371ce01d78bbc5c4df
-
SHA1
4654d4043f7aadfa5c95bac9327b610958202642
-
SHA256
feb057d05a6585f45721b2c531f4908804c121dcd54b6c14bcc00b83c69ade8b
-
SHA512
e1a9194e1db77b1b2a45cc8449721ab0dcf8b7ff07080fd3c990fad3321b62aeabe3dfa9012e279a3bf8792936cbbd910ad3637c5c34b6e6372713eefe3dc753
-
SSDEEP
393216:ufHTHgedGq+cd3555el+++dbFpemf0X0caKmd:uf8edGPI3555el+++Vemfcm7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource feb057d05a6585f45721b2c531f4908804c121dcd54b6c14bcc00b83c69ade8b
Files
-
feb057d05a6585f45721b2c531f4908804c121dcd54b6c14bcc00b83c69ade8b.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 3.7MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1000KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hisvjfmo Size: 804KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bcqvotec Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE