fearless.rar
- SHA256 9594251d887dda824eb76d10035ecc56fc652bb7cc89ba8ad6b26c8060edce35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fearless.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target fearless.rar
- Size 232KB
- Sample260925-xgmkhstgra
- SHA256 9594251d887dda824eb76d10035ecc56fc652bb7cc89ba8ad6b26c8060edce35
- MD5 97d420cbdadcc6ddf329d4500c9335f4
- SHA1 46b96b68e8724d71d7d828a2469247c117636b0a
- SHA512 7bb65b5d96ff6b74ce1295545bce9f8572835b85d4a05243f88c0c91f2f0936d9f7c56572e85128e00cefa87416866eb02335402598cd8ab89a20de09f4dab95
- SSDEEP 6144:SwrMoi3GUk2SzJN8m8/4xYkRf+xrvEZSw:DRtUkvR8yYkRGxrW1
- TLSH T1E73423361BE482E7B2168C9435D63322AAD8F1B6E1013AE993C0C957F671B43D6799F0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/fearless.exe
File Explorer
-
fearless.rar.rar 232KB
-
fearless.exe.exe 932KB
fearless.exe
- IMPHASH ff445ae245a1ab39f765a90b6c6c196b
- SHA256 287fed54c5b0a98c98f0960c60f8e647ba3f008fd60003119e779e2635ee9c46
- MD5 7a2bfc1d29922810eb43bfaf7812a998
- SHA1 d8592ff0829c93b5cf1d6801095e864032cb8db6
- SHA512 219074e04162397589f5a6b3b6404e215f5e84c163caa5ead7b734efbb51241a2a9ec69ad419c564211b7426e7ccec8417afb22cdf7aa42565da95520f83b6b5
- SSDEEP 12288:kOGkqmLatmVWgtWLpw7uzOe7jIsh/+hFqRmf:JGk3ajg0l+uz/PGh7f
- TLSH T19E152B4B22879DDDFD43E2BAE041D31D98B6E4A09231C7FD8B2253715C90494EBE76AC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
10
Entry point
316146
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
gdi32
GetDeviceCaps
GetStockObject
kernel32
ExitProcess
GetCurrentDirectoryW
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentVariableW
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
Sleep
ole32
CoTaskMemFree
shlwapi
PathFileExistsW
PathFindFileNameW
user32
GetCaretBlinkTime
GetDesktopWindow
GetDoubleClickTime
GetKeyState
GetKeyboardLayout
GetKeyboardType
GetSysColor
GetSystemMetrics
GetWindow
IsGUIThread
LoadImageW
uxtheme
IsThemeActive
winmm
timeGetTime
waveOutGetNumDevs
Name
.text
Size
308KB
Virtual Size
307KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
488KB
Virtual Size
484KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
64KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
44KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
fothk
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=1, productName=Unmarked objects,
productName=Unmarked objects (old),
count=39, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=287, id=260, version=30795,
count=225, id=260, version=35207,
count=298, id=1, productName=Unmarked objects,