Static task
static1
Behavioral task
behavioral1
Sample
6da73016245b53db86abd30757c5e1b153ff9b1c0d58a36d8b162940f7c9c889.exe
Resource
win7-20230831-en
General
-
Target
6da73016245b53db86abd30757c5e1b153ff9b1c0d58a36d8b162940f7c9c889
-
Size
1.1MB
-
MD5
68de444d925a187d9dad172bb5b43dc6
-
SHA1
19e1036c03f1d45a2ee2dfdeb3c1d3cb78967e96
-
SHA256
6da73016245b53db86abd30757c5e1b153ff9b1c0d58a36d8b162940f7c9c889
-
SHA512
1ab6b928bd3d57c25a05af433770cd7d1066121f93dafc874f4af66d0077a48cf5ec2415098c4672269ef10f01e2bb642cbc88b96f24ba267874dcf664df3676
-
SSDEEP
24576:0FqDuPmShx3E7vmOqQDYSLW7g6aM1Z5Ta4Zukcl7WHinB8D9UNFTpTCW:0dO007LJkqW75a6Z5TlcXaCB2aNlpTj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6da73016245b53db86abd30757c5e1b153ff9b1c0d58a36d8b162940f7c9c889
Files
-
6da73016245b53db86abd30757c5e1b153ff9b1c0d58a36d8b162940f7c9c889.exe windows:4 windows x86
bce4a38e1f186b19f69121394340e840
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsW
user32
CharNextA
gdi32
SetMapMode
comdlg32
GetOpenFileNameA
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
ShellExecuteA
comctl32
_TrackMouseEvent
oledlg
ord8
ole32
CoFreeUnusedLibraries
olepro32
ord253
oleaut32
SysAllocStringLen
winmm
mciGetErrorStringA
shlwapi
StrToIntA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 232KB - Virtual size: 696KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 928KB - Virtual size: 928KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ