Static task
static1
Behavioral task
behavioral1
Sample
fb8f77e69abb06b71332cc38f07e5b1011e845c7707f04446a37ea7aa51f1923.exe
Resource
win7-20240903-en
General
-
Target
fb8f77e69abb06b71332cc38f07e5b1011e845c7707f04446a37ea7aa51f1923.exe
-
Size
5.0MB
-
MD5
2d2ccece33beff254f4c3a73bad42848
-
SHA1
10733a9f208394ebd57f58bbe5127f6711ee9abe
-
SHA256
fb8f77e69abb06b71332cc38f07e5b1011e845c7707f04446a37ea7aa51f1923
-
SHA512
0010d21aa7213fdc3d0fb6d592b71232bdac18cb60b1ed2d60f403d279443f176100edf4cecbc37f6ad05a032955c2488728ec1a63053a4f422a16858fbf5c1f
-
SSDEEP
98304:0+0/vLdzDaNjZ8J/G19c8DvA/jitb1xbs39y4l1m:yLgN6J/G1O8DvA/jSb16Ny4zm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb8f77e69abb06b71332cc38f07e5b1011e845c7707f04446a37ea7aa51f1923.exe
Files
-
fb8f77e69abb06b71332cc38f07e5b1011e845c7707f04446a37ea7aa51f1923.exe.exe windows:4 windows x86 arch:x86
f079d012cb5cecbebbaaee8a9ebb971c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextFileA
LoadResource
LockResource
GetWindowsDirectoryA
FindClose
FindResourceA
CreateFileA
WriteFile
FindFirstFileA
SearchPathA
HeapAlloc
GetStringTypeW
HeapFree
GetStringTypeA
LoadLibraryA
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
MultiByteToWideChar
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ExitProcess
WinExec
VirtualAlloc
CloseHandle
ReadFile
SetCurrentDirectoryA
QueryPerformanceFrequency
QueryPerformanceCounter
LCMapStringW
LCMapStringA
GetProcAddress
VirtualFree
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
user32
ChangeDisplaySettingsA
DispatchMessageA
CreateWindowExA
TranslateMessage
PeekMessageA
MessageBoxA
LoadImageA
LoadBitmapA
ShowCursor
ClientToScreen
SetRect
PostMessageA
GetKeyState
PostQuitMessage
SetWindowTextA
DestroyWindow
BeginPaint
EndPaint
DefWindowProcA
LoadCursorA
RegisterClassA
GetSystemMetrics
ShowWindow
gdi32
CreateCompatibleDC
DeleteObject
DeleteDC
BitBlt
SelectObject
GetObjectA
dsound
DirectSoundCreate
ddraw
DirectDrawCreate
winmm
mciSendCommandA
joyGetPosEx
Sections
.text Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fhxcnza Size: 72KB - Virtual size: 72KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE