Static task
static1
Behavioral task
behavioral1
Sample
a6096f035521987c7cafc7ddb77ca3dfafb56a21b10398a876f06c20e1ae4ca7.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
a6096f035521987c7cafc7ddb77ca3dfafb56a21b10398a876f06c20e1ae4ca7.exe
Resource
win10v2004-20230915-en
General
-
Target
a6096f035521987c7cafc7ddb77ca3dfafb56a21b10398a876f06c20e1ae4ca7
-
Size
6.9MB
-
MD5
01fc05d2d617fbdb1d700d958236f007
-
SHA1
076c929ba5d41a909812441566ead0a195c6fc1d
-
SHA256
a6096f035521987c7cafc7ddb77ca3dfafb56a21b10398a876f06c20e1ae4ca7
-
SHA512
e635f9e2f657af28c25acce6d8ff97517078cf73a8d1c1e27fb10fbe628a0b04f67ed01b7bd1e00f6717c935c39975d68bb19ea40d9108451d3acbf37c2b7e58
-
SSDEEP
49152:dGx6H0PEUcWEgu5JSwpbRJwuDR/ssC7q1HQXs55peBGM8Xn5f3TwJXi:kU0P71u5LbXwo/ssCuHn55dx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6096f035521987c7cafc7ddb77ca3dfafb56a21b10398a876f06c20e1ae4ca7
Files
-
a6096f035521987c7cafc7ddb77ca3dfafb56a21b10398a876f06c20e1ae4ca7.exe windows:5 windows x86
ad6e52e2b3329c09d0f6a92124b9c62a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
GetCommandLineW
CreateDirectoryW
CreateFileW
SetFileAttributesW
FindFirstFileW
FindNextFileW
QueryPerformanceCounter
LCMapStringEx
DecodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
GetTickCount
SetEnvironmentVariableA
WriteConsoleW
SetEndOfFile
SetStdHandle
LoadLibraryExW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
GetModuleFileNameA
GetTimeZoneInformation
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
GetFileType
GetStdHandle
GetOEMCP
GetACP
IsValidCodePage
GetCurrentThreadId
GetProcessHeap
GetModuleHandleExW
CloseHandle
FindClose
ReadFile
WriteFile
GetFileSize
Sleep
GetLastError
WideCharToMultiByte
OutputDebugStringW
OutputDebugStringA
GetSystemDefaultLangID
MultiByteToWideChar
GetStringTypeW
ExitProcess
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetProcAddress
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineA
MoveFileExW
GetSystemTimeAsFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
FindFirstFileExW
GetFileAttributesExW
RemoveDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetEnvironmentVariableW
GetFullPathNameW
HeapSize
HeapReAlloc
HeapAlloc
GetCPInfo
IsProcessorFeaturePresent
DeleteFileW
RtlUnwind
HeapFree
EncodePointer
lstrlenW
user32
GetDoubleClickTime
CopyRect
OffsetRect
shell32
ShellExecuteW
SHFileOperationW
shlwapi
StrToIntExW
PathFileExistsW
StrChrW
StrRChrW
StrCatW
StrCmpW
StrCpyW
StrCpyNW
PathRemoveFileSpecW
StrStrW
StrToIntW
lua5.1
lua_settop
lua_isnumber
lua_type
lua_pushnil
lua_pushstring
lua_gettable
lua_settable
lua_next
lua_close
lua_isstring
lua_tolstring
lua_objlen
lua_pushnumber
lua_pushinteger
lua_getfield
lua_rawgeti
lua_pcall
luaL_openlibs
luaL_ref
luaL_loadfile
luaL_newstate
luaL_checklstring
luaL_checkinteger
lua_tointeger
lua_pushcclosure
lua_pushboolean
lua_setfield
lua_tonumber
sdl2
SDL_isspace
SDL_wcslen
SDL_iconv_string
SDL_Quit
SDL_Init
SDL_DestroyRenderer
SDL_GetRendererInfo
SDL_CreateRenderer
SDL_SetHint
SDL_DestroyWindow
SDL_SetWindowIcon
SDL_SetMainReady
SDL_malloc
SDL_GetKeyboardState
SDL_GetModState
SDL_GetScancodeFromKey
SDL_GetMouseState
SDL_GetDisplayBounds
SDL_RenderSetLogicalSize
SDL_free
SDL_memset
SDL_SetClipboardText
SDL_GetClipboardText
SDL_HasClipboardText
SDL_PollEvent
SDL_PushEvent
SDL_GetTicks
SDL_Delay
SDL_FreeSurface
SDL_CreateColorCursor
SDL_SetCursor
SDL_FreeCursor
SDL_ShowCursor
SDL_CreateTextureFromSurface
SDL_SetWindowBrightness
SDL_SetTextureColorMod
SDL_SetTextureAlphaMod
SDL_SetTextureBlendMode
SDL_SetRenderTarget
SDL_RenderSetClipRect
SDL_SetRenderDrawColor
SDL_SetRenderDrawBlendMode
SDL_RenderClear
SDL_RenderDrawLine
SDL_RenderDrawLines
SDL_RenderDrawRect
SDL_RenderFillRect
SDL_RenderCopy
SDL_RenderCopyEx
SDL_RenderPresent
SDL_LockSurface
SDL_UnlockSurface
SDL_GetColorKey
SDL_GetSurfaceColorMod
SDL_GetSurfaceAlphaMod
SDL_GetSurfaceBlendMode
SDL_CreateTexture
SDL_QueryTexture
SDL_UpdateTexture
SDL_LockTexture
SDL_UnlockTexture
SDL_DestroyTexture
SDL_GetPerformanceCounter
SDL_GetPerformanceFrequency
SDL_GetError
SDL_RWFromFile
SDL_CreateWindow
SDL_ShowSimpleMessageBox
sdl2_image
IMG_Load
IMG_Quit
IMG_Init
IMG_LoadTexture
sdl2_mixer
Mix_PlayMusic
Mix_Volume
Mix_VolumeChunk
Mix_VolumeMusic
Mix_CloseAudio
Mix_FreeMusic
Mix_PlayChannelTimed
Mix_HookMusicFinished
Mix_HaltChannel
Mix_PauseMusic
Mix_ResumeMusic
Mix_Init
Mix_Quit
Mix_OpenAudio
Mix_LoadWAV_RW
Mix_LoadMUS
Mix_FreeChunk
sdl2_ttf
TTF_Init
TTF_GetFontKerningSizeGlyphs
TTF_CloseFont
TTF_RenderGlyph_Blended
TTF_SizeUNICODE
TTF_GlyphMetrics
TTF_OpenFont
TTF_FontHeight
TTF_GlyphIsProvided
TTF_Quit
Sections
.text Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 661KB - Virtual size: 661KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.0MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 564KB - Virtual size: 564KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ