Static task
static1
Behavioral task
behavioral1
Sample
6f994bbfb849f8930a13ff2502dd3abff945d51dd1adae7b5d9c710b93703f44.exe
Resource
win7-20230831-en
General
-
Target
6f994bbfb849f8930a13ff2502dd3abff945d51dd1adae7b5d9c710b93703f44
-
Size
949KB
-
MD5
7034aea6a4c1025577580d64974dff72
-
SHA1
b6076c5c244b1ba4d822a9489b1e59505e6c5e9f
-
SHA256
6f994bbfb849f8930a13ff2502dd3abff945d51dd1adae7b5d9c710b93703f44
-
SHA512
7147b2690a65325c40170c99b9adda86da92c5adfabdf78122ce6d2ad1260f0739bee7e73ee98a57ae8fbf7c1b48f5830baf70c96a0dd8e2545d1ba77956507d
-
SSDEEP
24576:GIrA0VL44NXuJEv+n9arjH63EjZwb3sZUW:x00VPoSjs7b3sZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f994bbfb849f8930a13ff2502dd3abff945d51dd1adae7b5d9c710b93703f44
Files
-
6f994bbfb849f8930a13ff2502dd3abff945d51dd1adae7b5d9c710b93703f44.exe windows x86
bd06ef3d1edf89c03af5f08670febe1e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
SuspendThread
ResumeThread
SetFileAttributesW
Sleep
GetFileInformationByHandle
FormatMessageW
LocalFileTimeToFileTime
GetLastError
FileTimeToSystemTime
GetCurrentThread
TerminateThread
TlsAlloc
CloseHandle
GetLocalTime
GetOverlappedResult
DeleteCriticalSection
SystemTimeToFileTime
TlsGetValue
SystemTimeToTzSpecificLocalTime
TlsFree
CreateEventA
GetTickCount
GetDriveTypeW
SetFilePointer
SetEndOfFile
FlushFileBuffers
GetFileSizeEx
GetFileSize
BackupRead
BackupSeek
GetFileTime
BackupWrite
CreateHardLinkW
SetFileValidData
FindFirstFileW
CreateMutexA
ReleaseMutex
GetSystemTimeAsFileTime
SetPriorityClass
GetCommandLineW
SetSystemPowerState
GetCurrentProcess
GetThreadLocale
CreatePipe
DuplicateHandle
CreateFileW
ProcessIdToSessionId
TzSpecificLocalTimeToSystemTime
GetCurrentProcessId
SetThreadExecutionState
GetSystemTime
GetLongPathNameW
GetFileAttributesExW
GetStdHandle
SetConsoleMode
GetConsoleMode
WriteConsoleW
GetTempPathW
CreateProcessW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetProcAddress
FreeLibrary
UnmapViewOfFile
OpenMutexA
CreateFileMappingA
MapViewOfFile
DeviceIoControl
RemoveDirectoryW
FindFirstChangeNotificationW
GetVolumeNameForVolumeMountPointW
FindCloseChangeNotification
FindNextChangeNotification
FindClose
InitializeCriticalSection
LeaveCriticalSection
SetThreadPriority
SetFileTime
GetDiskFreeSpaceW
WriteFile
FindNextFileW
EnterCriticalSection
SetLastError
TlsSetValue
CancelIo
GetVolumeInformationW
ReadFile
MoveFileW
CopyFileW
MoveFileExW
CreateDirectoryW
DeleteFileW
OpenProcess
GetUserDefaultLCID
GetFileAttributesW
InterlockedExchange
VirtualProtect
VirtualFree
InterlockedCompareExchange
VirtualAlloc
GetModuleFileNameW
SetEvent
GetVersionExA
GetModuleHandleW
GetEnvironmentStringsW
WriteConsoleA
OutputDebugStringA
AttachConsole
OutputDebugStringW
FreeConsole
GetFileType
AllocConsole
SetThreadLocale
FindFirstFileExW
GetSystemDirectoryW
GlobalAlloc
GlobalFree
LoadLibraryW
GlobalLock
MultiByteToWideChar
WideCharToMultiByte
CreateMutexW
RtlCaptureStackBackTrace
GetExitCodeThread
RaiseException
CreateThread
IsBadReadPtr
SetUnhandledExceptionFilter
ExitProcess
SizeofResource
FindResourceA
LockResource
LoadResource
GetSystemInfo
VirtualQuery
LoadLibraryExA
EncodePointer
DecodePointer
GetCPInfo
CompareStringW
LCMapStringW
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
CreateEventW
GetStringTypeW
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
ResetEvent
WaitForSingleObjectEx
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
RtlUnwind
LoadLibraryExW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapAlloc
HeapReAlloc
HeapFree
IsValidLocale
EnumSystemLocalesW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
GetConsoleCP
HeapSize
SetFilePointerEx
GetEnvironmentVariableW
GetFullPathNameW
WaitForSingleObject
gdi32
GetClipRgn
GetObjectA
Polyline
CreateRectRgn
CreatePen
SetBkColor
CreateSolidBrush
GetObjectType
SelectObject
GetDeviceCaps
DeleteDC
SetTextColor
SetBkMode
SelectClipRgn
LPtoDP
DeleteObject
CreateFontIndirectW
DPtoLP
wintrust
WinVerifyTrust
Sections
.text Size: 609KB - Virtual size: 608KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 165KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 161KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ