Static task
static1
Behavioral task
behavioral1
Sample
fc3f10c4cc4a22de75a0beb023f885404485df9ba310f44c53f10373373b1812.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
fc3f10c4cc4a22de75a0beb023f885404485df9ba310f44c53f10373373b1812.exe
Resource
win10v2004-20241007-en
General
-
Target
fc3f10c4cc4a22de75a0beb023f885404485df9ba310f44c53f10373373b1812.exe
-
Size
128KB
-
MD5
d8726162ad91472db5de567f57957ca9
-
SHA1
d3838cf14e8739d4d614f940cbffc866d7166966
-
SHA256
fc3f10c4cc4a22de75a0beb023f885404485df9ba310f44c53f10373373b1812
-
SHA512
253a8bb9a9aee47637a15dbf6967513a36c2c51711bee1eff7a4495ddfa0a2410464a4e746708c87f1765ef0014def00d5efb0649446f9ad79535a43f739ea75
-
SSDEEP
3072:ULselXPVHKCid5e/Hn73w1buGLclkNkNbo2YFwmjAvp:U4A/VqCize/HD6bVLclktevp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc3f10c4cc4a22de75a0beb023f885404485df9ba310f44c53f10373373b1812.exe
Files
-
fc3f10c4cc4a22de75a0beb023f885404485df9ba310f44c53f10373373b1812.exe.exe windows:4 windows x86 arch:x86
c47d7ff9cd6fe51b6f668661fb7ba507
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyW
VirtualAlloc
GetPrivateProfileIntA
lstrcpyW
FindNextVolumeW
GetStartupInfoW
lstrcpyW
SetConsoleTitleA
GetModuleFileNameW
IsBadStringPtrW
GetModuleHandleA
GetLocaleInfoA
SetStdHandle
CreateEventA
GetFullPathNameA
SetCurrentDirectoryA
DeleteFileA
lstrlenW
GetNumberFormatA
lstrcpyW
TlsAlloc
lstrcpyW
GetCurrentProcess
untfs
ChkdskEx
Extend
Format
Recover
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.orpc Size: 1KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RDATA Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.EDATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ