Static task
static1
General
-
Target
th06e.exe
-
Size
500KB
-
MD5
b413470897d965f584c8d7f288d92fbd
-
SHA1
ba833d24c776f09ecdadbbd70e399a33314d8f76
-
SHA256
0883c6433b77af87054d9d05731649c79926a55037840c72d33e50635d64d506
-
SHA512
bd4f0aa244ef71088cff8111ef96a173698853161eda845cbe3f0bd21ef5251e5141849211f21a5b86dff3c18169ccf6b0307ab8302bf5b956c31f7b47b2a53b
-
SSDEEP
12288:HqOcRFbyHZpDd+FiulysbiwjjVCCnzSEVhARNtTP2U9Ep6:Hqd4J+iusmiw0CnzSnAU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource th06e.exe
Files
-
th06e.exe.exe windows x86
17b55a57ba1d7e45de0a854174eb9c8f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
dinput8
DirectInput8Create
dsound
ord11
d3d8
Direct3DCreate8
winmm
mmioSeek
mmioGetInfo
mmioSetInfo
mmioDescend
mmioRead
mmioAscend
mmioOpenA
mmioClose
midiOutUnprepareHeader
timeKillEvent
timeSetEvent
timeGetDevCaps
midiOutShortMsg
midiOutPrepareHeader
midiOutLongMsg
midiOutReset
midiOutClose
midiOutOpen
timeBeginPeriod
timeGetTime
timeEndPeriod
joyGetPosEx
joyGetDevCapsA
midiOutGetNumDevs
mmioAdvance
kernel32
GetOEMCP
GetACP
GetLocaleInfoA
GetCPInfo
GetStringTypeW
GetStringTypeA
InitializeCriticalSection
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcAddress
LoadLibraryA
GetLastError
CreateMutexA
CreateThread
CreateEventA
CloseHandle
WaitForSingleObject
FindClose
FindNextFileA
FindFirstFileA
Sleep
GetFileSize
GetFileTime
SetFilePointer
IsBadReadPtr
DeleteFileA
ReadFile
WriteFile
LocalFree
LocalAlloc
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
HeapFree
GetModuleHandleA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
TlsSetValue
SetLastError
TlsFree
IsBadWritePtr
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapCreate
HeapDestroy
GetModuleFileNameA
GetSystemTimeAsFileTime
IsBadCodePtr
SetStdHandle
FlushFileBuffers
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
VirtualQuery
SetEndOfFile
CreateFileA
ExitProcess
HeapAlloc
RtlUnwind
RaiseException
GetLocalTime
CreateDirectoryA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetStartupInfoA
GetCommandLineA
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
user32
DrawTextW
MsgWaitForMultipleObjects
PostThreadMessageA
KillTimer
SetTimer
SetCursor
DefWindowProcA
LoadCursorA
RegisterClassA
CreateWindowExA
GetSystemMetrics
SystemParametersInfoA
ShowCursor
PeekMessageA
TranslateMessage
DispatchMessageA
ShowWindow
MoveWindow
DestroyWindow
DrawTextA
MessageBoxA
SetKeyboardState
GetKeyboardState
GetWindowLongA
gdi32
SetBkColor
CreateFontIndirectA
GetObjectA
GetStockObject
TextOutA
SetBkMode
SetTextColor
CreateDIBSection
DeleteDC
CreateCompatibleDC
CreateFontA
SelectObject
DeleteObject
Sections
.text Size: 420KB - Virtual size: 418KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ