Static task
static1
Behavioral task
behavioral1
Sample
6084b70d04286c6199c06859440808b1b6259caedf266148e2dfa8a26e82b3b8.exe
Resource
win7-20230712-en
General
-
Target
6084b70d04286c6199c06859440808b1b6259caedf266148e2dfa8a26e82b3b8
-
Size
5.4MB
-
MD5
6ccf0136728e543ba21796e1319c2a9c
-
SHA1
20006c890ee36f813d556112d07447e8ea529b99
-
SHA256
6084b70d04286c6199c06859440808b1b6259caedf266148e2dfa8a26e82b3b8
-
SHA512
b34605311887d312cd05ba7039d5fa008834d7051b3ad6e8ace82d6fffa8a6608a1cceeee143630d9440513588e60c2412ad0e47b33e17a879efae0d82d692bf
-
SSDEEP
98304:N+6GQ7jNzAWk5/hM2o5OMSwL8owAQ5dbgfCKnu3KdAhfy4IgEsRK3s8s8PhKyTw:IRQvNzA75K2PwL8/sfu2K6JlsRK872w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6084b70d04286c6199c06859440808b1b6259caedf266148e2dfa8a26e82b3b8
Files
-
6084b70d04286c6199c06859440808b1b6259caedf266148e2dfa8a26e82b3b8.exe windows x86
e5d349c1cd48c0cd8c344a2801cf6ea0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetModuleHandleA
user32
LoadIconA
gdi32
TextOutA
winmm
waveOutUnprepareHeader
winspool.drv
OpenPrinterA
advapi32
RegQueryValueA
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
ord17
ws2_32
inet_ntoa
comdlg32
ChooseColorA
secur32
GetUserNameExA
wininet
DeleteUrlCacheEntryW
urlmon
URLDownloadToFileW
shlwapi
StrTrimA
iphlpapi
GetAdaptersInfo
Sections
.text Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo2 Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE