Static task
static1
General
-
Target
th06e.exe
-
Size
508KB
-
MD5
483b4da9fed19ce38862944e3bb07ec0
-
SHA1
98437b3f7f776f71fc17c914e36b17a4d6c8388e
-
SHA256
4b4e6224b3a20d7e9626b8cc345ac4fb6f7f5991bdcde427ebcb882bb59a9cfe
-
SHA512
e2cd810a84427cb81e9603df5697c7258cde5ec59bcbf2893f9d4b5211b6175862ad1ed8cae8c54373522a00f600742417f8fda6f01a8696062ee86ea1c3e1b1
-
SSDEEP
12288:lqOcRFbyHZpDd+FiulysbiwjjVCCnzSEVhARNtTP2U9Ekjs:lqd4J+iusmiw0CnzSnAUW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource th06e.exe
Files
-
th06e.exe.exe windows x86
17b55a57ba1d7e45de0a854174eb9c8f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
dinput8
DirectInput8Create
dsound
ord11
d3d8
Direct3DCreate8
winmm
mmioSeek
mmioGetInfo
mmioSetInfo
mmioDescend
mmioRead
mmioAscend
mmioOpenA
mmioClose
midiOutUnprepareHeader
timeKillEvent
timeSetEvent
timeGetDevCaps
midiOutShortMsg
midiOutPrepareHeader
midiOutLongMsg
midiOutReset
midiOutClose
midiOutOpen
timeBeginPeriod
timeGetTime
timeEndPeriod
joyGetPosEx
joyGetDevCapsA
midiOutGetNumDevs
mmioAdvance
kernel32
GetOEMCP
GetACP
GetLocaleInfoA
GetCPInfo
GetStringTypeW
GetStringTypeA
InitializeCriticalSection
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcAddress
LoadLibraryA
GetLastError
CreateMutexA
CreateThread
CreateEventA
CloseHandle
WaitForSingleObject
FindClose
FindNextFileA
FindFirstFileA
Sleep
GetFileSize
GetFileTime
SetFilePointer
IsBadReadPtr
DeleteFileA
ReadFile
WriteFile
LocalFree
LocalAlloc
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
HeapFree
GetModuleHandleA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
TlsSetValue
SetLastError
TlsFree
IsBadWritePtr
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapCreate
HeapDestroy
GetModuleFileNameA
GetSystemTimeAsFileTime
IsBadCodePtr
SetStdHandle
FlushFileBuffers
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
VirtualQuery
SetEndOfFile
CreateFileA
ExitProcess
HeapAlloc
RtlUnwind
RaiseException
GetLocalTime
CreateDirectoryA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetStartupInfoA
GetCommandLineA
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
user32
DrawTextW
MsgWaitForMultipleObjects
PostThreadMessageA
KillTimer
SetTimer
SetCursor
DefWindowProcA
LoadCursorA
RegisterClassA
CreateWindowExA
GetSystemMetrics
SystemParametersInfoA
ShowCursor
PeekMessageA
TranslateMessage
DispatchMessageA
ShowWindow
MoveWindow
DestroyWindow
DrawTextA
MessageBoxA
SetKeyboardState
GetKeyboardState
GetWindowLongA
gdi32
SetBkColor
CreateFontIndirectA
GetObjectA
GetStockObject
TextOutA
SetBkMode
SetTextColor
CreateDIBSection
DeleteDC
CreateCompatibleDC
CreateFontA
SelectObject
DeleteObject
Sections
.text Size: 420KB - Virtual size: 418KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ