Static task
static1
Behavioral task
behavioral1
Sample
6f81775cb5dec276c5b0678e7cd98ec01244f287b8737266b685383c795e31a1.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
6f81775cb5dec276c5b0678e7cd98ec01244f287b8737266b685383c795e31a1.exe
Resource
win10v2004-20230703-en
General
-
Target
6f81775cb5dec276c5b0678e7cd98ec01244f287b8737266b685383c795e31a1
-
Size
1015KB
-
MD5
163e8b9c6ec907909f1c84a35917b6cf
-
SHA1
6b16540bdb3409f3db8c811200caddaf6984727b
-
SHA256
6f81775cb5dec276c5b0678e7cd98ec01244f287b8737266b685383c795e31a1
-
SHA512
feb8b6a7863c083581253aa62ae6096a43b565e4b369c4e224e9ca25e4dd01397190633a8db20ac01f189d22139adda87e8b06c0bc5fba5ba75890f1d8580ed5
-
SSDEEP
24576:dGfcnOkbJj6Lue5ZcBTN9naiv4jWHXi0/TsRdN/60:qkbgLue56ag4jeXLEzy0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f81775cb5dec276c5b0678e7cd98ec01244f287b8737266b685383c795e31a1
Files
-
6f81775cb5dec276c5b0678e7cd98ec01244f287b8737266b685383c795e31a1.exe windows x86
a9387c31f051765290716f64ece7a153
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
CopyImage
gdi32
GetCurrentPositionEx
msimg32
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
advapi32
RegEnumValueA
shell32
ShellExecuteA
comctl32
ImageList_GetIconSize
shlwapi
PathRemoveExtensionA
ole32
OleSaveToStream
oleaut32
VariantClear
oledlg
ord8
gdiplus
GdipGetImageGraphicsContext
oleacc
LresultFromObject
imm32
ImmGetOpenStatus
winmm
PlaySoundA
Sections
.text Size: 1001KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE