Resubmissions
17-01-2024 08:56
240117-kwahaacahj 1015-01-2024 12:37
240115-ptgk2aggf9 1009-10-2023 22:51
231009-2stkesgh9x 1005-10-2023 05:47
231005-ggwkesah27 1005-10-2023 05:33
231005-f8846agh2v 1004-10-2023 19:02
231004-xp13wagc48 1004-10-2023 18:25
231004-w2lchsdh3z 1004-10-2023 18:18
231004-wxt4vsfg75 10Static task
static1
Behavioral task
behavioral1
Sample
60f4f1cd1eed873c414fb56441a3d76efbb469ee1312b3b73c0534eec1e082d3.exe
Resource
win7-20230831-en
General
-
Target
60f4f1cd1eed873c414fb56441a3d76efbb469ee1312b3b73c0534eec1e082d3
-
Size
1.1MB
-
MD5
5f4d6eea465bbfb88b0057dfd9978215
-
SHA1
7a169f39d864e0d48d0b86209434f5e85b6ecc6e
-
SHA256
60f4f1cd1eed873c414fb56441a3d76efbb469ee1312b3b73c0534eec1e082d3
-
SHA512
331ccfe2d6f7512a8cf1033fb88d0e6d76243a2ec7910c8304aff0828e2b741e1c8b54d4b83aaed08da3ef7f7b485a6119c8fe31ce6429ec3c62dacd64f25d5f
-
SSDEEP
24576:9DqG4BipGRcqzO7I19YpwQXPRt5atP2xQgy3:9DqFrH6819EhPRt6edc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60f4f1cd1eed873c414fb56441a3d76efbb469ee1312b3b73c0534eec1e082d3
Files
-
60f4f1cd1eed873c414fb56441a3d76efbb469ee1312b3b73c0534eec1e082d3.exe windows:6 windows x64
f6a5f39c798494b87fa9fbdeff4fb19d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
CreateFileA
WriteFile
CloseHandle
ConvertThreadToFiber
SwitchToFiber
ReadFile
GetFileType
GetFileInformationByHandle
CreateFileMappingA
MapViewOfFile
ExitProcess
VirtualAlloc
CreateMutexA
ReleaseMutex
DeviceIoControl
GetHandleInformation
SetHandleInformation
Sections
.text Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 322KB - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 698KB - Virtual size: 698KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ