Static task
static1
Behavioral task
behavioral1
Sample
6ab6d8412706cb3f4c486c25ca10fd038ef1d7ea4f3ba58df19afd009c108320.exe
Resource
win7-20230831-en
General
-
Target
6ab6d8412706cb3f4c486c25ca10fd038ef1d7ea4f3ba58df19afd009c108320
-
Size
1.6MB
-
MD5
d0626081a6f25f2c5de3d011ca49db06
-
SHA1
66359663c155c97dffa40cd4b9663be9bb52e683
-
SHA256
6ab6d8412706cb3f4c486c25ca10fd038ef1d7ea4f3ba58df19afd009c108320
-
SHA512
4f0469851359879b9c47cdb3c8a601a1cc1150d6acf363777e05c739caf400df04cec4e4a8a647eabbbfb87b7dc35c1bae1cb828088b7b64d0e34da2881bd297
-
SSDEEP
49152:N5HrmVjsVPv+GpTyKdHjAIpDoXQplp+G2P5vUy:N5LmVjsVPvxOKdHjAIxoK2PxUy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ab6d8412706cb3f4c486c25ca10fd038ef1d7ea4f3ba58df19afd009c108320
Files
-
6ab6d8412706cb3f4c486c25ca10fd038ef1d7ea4f3ba58df19afd009c108320.exe windows:4 windows x86
2d4f28a911adab9e1e84923b6227161a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
user32
GetSysColorBrush
gdi32
SaveDC
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
DragQueryFileA
comctl32
ord17
oledlg
ord8
ole32
CLSIDFromString
olepro32
ord253
oleaut32
SysFreeString
wsock32
WSAStartup
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 724KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 948KB - Virtual size: 948KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ