Static task
static1
Behavioral task
behavioral1
Sample
b6a683dc804b66547a4e3964783e57118946563632c9778deef6383701deb7b0.exe
Resource
win7-20230712-en
General
-
Target
b6a683dc804b66547a4e3964783e57118946563632c9778deef6383701deb7b0
-
Size
980KB
-
MD5
f7b2db33503c77f0948829213b96a688
-
SHA1
c0dee85d90490e9e219a900bee0d8bc7572de7e6
-
SHA256
b6a683dc804b66547a4e3964783e57118946563632c9778deef6383701deb7b0
-
SHA512
98a7dd2fafca1cd4ac992f7cabb05d16e70c87511b8396ac8a21e31583d94549eef09d15b364d4a5f8e0465901a7916ba25a50b60d0b84dc1c030c1b2f91dac9
-
SSDEEP
24576:WFMkNYBKOe7yjHUsiTYhnbzqlQo1zZkZW5:KYBKOemj1iQ01ZkZW5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6a683dc804b66547a4e3964783e57118946563632c9778deef6383701deb7b0
Files
-
b6a683dc804b66547a4e3964783e57118946563632c9778deef6383701deb7b0.exe windows x86
3a8897c84eb41f36b4bbabcc617408b8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
user32
GetWindow
advapi32
RegDeleteKeyA
shell32
SHGetFolderPathW
Sections
.text Size: 128KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 784KB - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ