Static task
static1
Behavioral task
behavioral1
Sample
6c9f77a8991b0fc5fc4e4f7a23c8bc3564651cf759e0234d6ff6d712f0dc74cb.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6c9f77a8991b0fc5fc4e4f7a23c8bc3564651cf759e0234d6ff6d712f0dc74cb.exe
Resource
win10v2004-20230915-en
General
-
Target
6c9f77a8991b0fc5fc4e4f7a23c8bc3564651cf759e0234d6ff6d712f0dc74cb
-
Size
2.6MB
-
MD5
ee7f823e6ab0423627423dd04de63f88
-
SHA1
9f5d7dd3eb47eafa0f2fea16cdf308e46e830eeb
-
SHA256
6c9f77a8991b0fc5fc4e4f7a23c8bc3564651cf759e0234d6ff6d712f0dc74cb
-
SHA512
4631ae8d87319050f4e63ad46f85703c6e344f38ce51867b23eed6d60039c3f1cfd4aa14aa8b1b2c6557aa3bc5f8268b1cbc274d2a02c6a9e0756f080e16d4aa
-
SSDEEP
49152:PXIk0uGBInqTJTLgprAbizpmx4C/kCwXtcNgaAnG4l3I+tiTF:gkZK7JISidwZNgaUG4l3I+tiTF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c9f77a8991b0fc5fc4e4f7a23c8bc3564651cf759e0234d6ff6d712f0dc74cb
Files
-
6c9f77a8991b0fc5fc4e4f7a23c8bc3564651cf759e0234d6ff6d712f0dc74cb.exe windows x86
91d055100644acd6ff8dc8d60be9b591
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSACleanup
version
VerLanguageNameA
kernel32
SetLastError
user32
GetSysColorBrush
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
ImageList_GetImageCount
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 948KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ