Static task
static1
Behavioral task
behavioral1
Sample
fcc9e64cb93bbbf9d8ec4fb6a570c583.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fcc9e64cb93bbbf9d8ec4fb6a570c583.exe
Resource
win10v2004-20241007-en
General
-
Target
fcc9e64cb93bbbf9d8ec4fb6a570c583.exe
-
Size
457KB
-
MD5
fcc9e64cb93bbbf9d8ec4fb6a570c583
-
SHA1
0bb2dbc2716f090b37713f7ffecc75c37c89e846
-
SHA256
18e605252f1490e7c063c2b1f888f1ad73ca681d444dc6918a440234288fcc16
-
SHA512
2c78b18d16948180260f4147dbe0f9c66c328bbb39f66587a5ad6e4f112dd4e08ebe34615fe393366d0c35626d061c115d838ee2424de0c10695051723adc4dc
-
SSDEEP
6144:ScxzE9oUj4a5SSZCa4gC3mf7WDtJxGJRDpNOE3LyYhFIueTT:ZZpc5SS/4YCERlNJWcT2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcc9e64cb93bbbf9d8ec4fb6a570c583.exe
Files
-
fcc9e64cb93bbbf9d8ec4fb6a570c583.exe.exe windows:5 windows x86 arch:x86
c0293ae3801c62c952661a7c5f031bd8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
GetLogicalDriveStringsW
SetEnvironmentVariableW
SetVolumeMountPointW
GetTimeFormatA
GetTickCount
CreateNamedPipeW
LocalFlags
GetNumberFormatA
ClearCommBreak
GetConsoleAliasExesW
GetEnvironmentStrings
SetFileShortNameW
LoadLibraryW
_hread
GetCalendarInfoA
SetVolumeMountPointA
GetVersionExW
EnumSystemCodePagesA
CreateSemaphoreA
GetFileAttributesW
CreateProcessA
GetModuleFileNameW
CreateActCtxA
CreateJobObjectA
VerifyVersionInfoW
InterlockedExchange
EnumCalendarInfoW
GetLastError
GetCurrentDirectoryW
GetProcAddress
CopyFileA
SetComputerNameA
SetFileAttributesA
DefineDosDeviceA
GlobalFree
FindClose
LoadLibraryA
LocalAlloc
CreateHardLinkW
GetNumberFormatW
OpenEventA
FoldStringW
SetEnvironmentVariableA
GlobalWire
GetModuleFileNameA
EnumDateFormatsA
GetShortPathNameW
GetDiskFreeSpaceExA
ReadConsoleInputW
GetCurrentProcessId
DebugBreak
GetTempPathA
TlsFree
LCMapStringW
InterlockedIncrement
CommConfigDialogA
GetLocaleInfoA
EnumCalendarInfoA
SetFilePointer
GetStdHandle
GetComputerNameA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CloseHandle
FlushFileBuffers
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
HeapAlloc
GetStartupInfoW
RtlUnwind
RaiseException
LCMapStringA
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
VirtualAlloc
HeapSize
ExitProcess
WriteFile
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetLocaleInfoW
GetModuleHandleA
GetConsoleCP
GetConsoleMode
gdi32
CreateDCW
CreateCompatibleBitmap
GetCharWidth32A
GetCharWidthI
advapi32
ReadEventLogW
ole32
CoSuspendClassObjects
winhttp
WinHttpOpen
WinHttpCheckPlatform
msimg32
AlphaBlend
Sections
.text Size: 325KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.moz Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.lafiju Size: 512B - Virtual size: 214B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ