Static task
static1
Behavioral task
behavioral1
Sample
6f6240d60f08db2e126ed4fc62f1f2f1be746dc52c1a0f920cecfd12ac7835fb.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6f6240d60f08db2e126ed4fc62f1f2f1be746dc52c1a0f920cecfd12ac7835fb.exe
Resource
win10v2004-20230915-en
General
-
Target
6f6240d60f08db2e126ed4fc62f1f2f1be746dc52c1a0f920cecfd12ac7835fb
-
Size
9.9MB
-
MD5
c3d96a48e0d9db0b666fb019432e2a17
-
SHA1
86b8c3f4df57c7a33d9c8979257e5684a32a64cd
-
SHA256
6f6240d60f08db2e126ed4fc62f1f2f1be746dc52c1a0f920cecfd12ac7835fb
-
SHA512
7e8e4684762bc06b4905a75e19bb06f698aafeeda6b64d17037986483f1d397bb981319ba7dd06797ac603254909c5c61bbed64259a9488e1c7c309c906b506d
-
SSDEEP
196608:reCXMgAvGRER8eI4ufobW80Zm2cDcVtGqiW1WXIGPw1Ou0I//fKQtl8cOR:iCX0vGREUtAp0Zm2cwGBW440w190I/l6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f6240d60f08db2e126ed4fc62f1f2f1be746dc52c1a0f920cecfd12ac7835fb
Files
-
6f6240d60f08db2e126ed4fc62f1f2f1be746dc52c1a0f920cecfd12ac7835fb.exe windows x86
29264dc7f280213ceff9dfa9ab6ee25a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
user32
GetSysColorBrush
gdi32
SaveDC
winmm
midiStreamRestart
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
CoTaskMemFree
oleaut32
VariantCopy
comctl32
ImageList_ReplaceIcon
oledlg
ord8
ws2_32
recv
Sections
.text Size: 5.1MB - Virtual size: 26.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE