Static task
static1
Behavioral task
behavioral1
Sample
fef199ed85e61612f52f7c44390dead92ad32e913e86e4ef9a84eeb7b79fe01eN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fef199ed85e61612f52f7c44390dead92ad32e913e86e4ef9a84eeb7b79fe01eN.exe
Resource
win10v2004-20240802-en
General
-
Target
fef199ed85e61612f52f7c44390dead92ad32e913e86e4ef9a84eeb7b79fe01eN.exe
-
Size
2.0MB
-
MD5
28ba0a2afe590ab8b6cb4d06b1bdc8d0
-
SHA1
e9769c64732adfa447e6d3c2c81b27cbfd7397ef
-
SHA256
fef199ed85e61612f52f7c44390dead92ad32e913e86e4ef9a84eeb7b79fe01e
-
SHA512
ef390cf1d83853df6ab486713bf77d22635e2be5679171e164cb29bd3dcc9a772f8d582bc30a5e976f484dc89e74d8dce1211b26a0536afac3de170eebb17453
-
SSDEEP
24576:MY4HtJkn9msYRoK1ViqNX6nGF3uYl+0BgytTITmAfxScpCl7mjbrQGsZLJlBrlxu:MY4Ne9aJ1VN13LleFFxfjb24jis
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fef199ed85e61612f52f7c44390dead92ad32e913e86e4ef9a84eeb7b79fe01eN.exe
Files
-
fef199ed85e61612f52f7c44390dead92ad32e913e86e4ef9a84eeb7b79fe01eN.exe.exe windows:4 windows
02017f04ac9c58a3a366ea508c229399
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
user32
GetShellWindow
GetDesktopWindow
Sections
.text Size: 672KB - Virtual size: 672KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE