Static task
static1
Behavioral task
behavioral1
Sample
6.exe
Resource
win7-20230712-en
General
-
Target
6.exe
-
Size
805KB
-
MD5
79a72d509cf678f8a9597862dfed29ab
-
SHA1
c0a76aa26afa412248ba0528165e5a89df7c1c62
-
SHA256
27c6371c3e13d821aa0094536b65887faf9d06f0993ad83175f91b1bf89d32ad
-
SHA512
cbec117a9f32a77b0a6f29d72a2275fa53f81caa91d3ea1bbbc8584537911b88282f4600be4c83d32a2edb805c9057cc211e3e98a8aa3b5f1eea85612f6b6a8c
-
SSDEEP
12288:gpQfW2/Rsn/Uvf+PQzxhbPkQayP2K8yI6Dr9t++VV43Q/7FpRIze:ED2pFvgixh7B+Kk6Drpy3Q/Ke
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6.exe
Files
-
6.exe.exe windows x86
efabbc75a6445136f9c3983eaff9c04a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
RegisterClassA
gdi32
SelectClipRgn
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
ws2_32
recvfrom
comdlg32
GetFileTitleA
Sections
.text Size: 374KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 430KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE