Static task
static1
Behavioral task
behavioral1
Sample
6a97da76c6f5e456e4590583c8c88ede43a4b6bb382e6e04fadc9cf623700ecb.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
6a97da76c6f5e456e4590583c8c88ede43a4b6bb382e6e04fadc9cf623700ecb.exe
Resource
win10v2004-20230220-en
General
-
Target
6a97da76c6f5e456e4590583c8c88ede43a4b6bb382e6e04fadc9cf623700ecb
-
Size
68KB
-
MD5
267b63be2faf15480f7e16077c58224a
-
SHA1
0eec4f50a51b3aef7c4319b4d326223919763d02
-
SHA256
6a97da76c6f5e456e4590583c8c88ede43a4b6bb382e6e04fadc9cf623700ecb
-
SHA512
aaf726db06fcef73742542477289b9d3a31b2d27969849e87e898bf2cf93b92de426ebc1c17ab90d54ed0f016f8020804c47c6df1e585f69c0c97b1b5168fa50
-
SSDEEP
1536:Fh5eyUjc4v7VbT7vlnEwJfYJ9X6IgoDK:Fh5sXfoF3goe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a97da76c6f5e456e4590583c8c88ede43a4b6bb382e6e04fadc9cf623700ecb
Files
-
6a97da76c6f5e456e4590583c8c88ede43a4b6bb382e6e04fadc9cf623700ecb.exe windows x86
56e8eea0ff91198803bdcd91c3e1fb82
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
GetCurrentThreadId
GetModuleFileNameA
lstrlenA
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
GetVersionExA
CreateProcessA
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
GetOEMCP
CreateMutexA
GetLastError
InterlockedDecrement
GetCurrentProcess
SetProcessWorkingSetSize
WaitForSingleObject
CreateEventA
SetFilePointer
GetACP
GetCPInfo
VirtualAlloc
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
InterlockedIncrement
UnhandledExceptionFilter
HeapAlloc
WriteFile
RtlUnwind
ExitProcess
TerminateProcess
WideCharToMultiByte
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
VirtualFree
SetHandleCount
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
user32
PostThreadMessageA
DispatchMessageA
TranslateMessage
GetMessageA
PostQuitMessage
advapi32
RegSetValueExA
RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
ole32
CoCreateInstance
CoTaskMemFree
CoDisconnectObject
CoUninitialize
CoInitialize
CLSIDFromString
StringFromCLSID
CoRevokeClassObject
CoRegisterClassObject
oleaut32
VariantClear
SysAllocString
SysFreeString
Sections
.text Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ