Static task
static1
Behavioral task
behavioral1
Sample
6de5b65c7f93c7adada84d5bbfb1adb37ec414cf2050f9e7ce342784dd6ea0cc.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6de5b65c7f93c7adada84d5bbfb1adb37ec414cf2050f9e7ce342784dd6ea0cc.exe
Resource
win10v2004-20230915-en
General
-
Target
6de5b65c7f93c7adada84d5bbfb1adb37ec414cf2050f9e7ce342784dd6ea0cc
-
Size
10.0MB
-
MD5
beca06c3b514120d7fed0eb2f913ea6a
-
SHA1
56082d1542d6c60814b482180b304bc79558d316
-
SHA256
6de5b65c7f93c7adada84d5bbfb1adb37ec414cf2050f9e7ce342784dd6ea0cc
-
SHA512
a5bb458dc1563266fe51fc047c42028e87499f28ee465852f19c58205c42e61c5b43f3b85e26a1b96adddaed15dda35f446fbc78796e8c90d339836f369f729d
-
SSDEEP
196608:LJ/XHTAXPOLe1WPPybxH0MLDHXzD0sHBcN/nl7uKI6jHH9eRAcFkCEFnyh+yMbhR:LJ/XHTsOLe1WCFHVLbEcmN/l7uKrHQR8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6de5b65c7f93c7adada84d5bbfb1adb37ec414cf2050f9e7ce342784dd6ea0cc
Files
-
6de5b65c7f93c7adada84d5bbfb1adb37ec414cf2050f9e7ce342784dd6ea0cc.exe windows:4 windows x86
29264dc7f280213ceff9dfa9ab6ee25a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
user32
GetSysColorBrush
gdi32
SaveDC
winmm
midiStreamRestart
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
CoTaskMemFree
oleaut32
VariantCopy
comctl32
ImageList_ReplaceIcon
oledlg
ord8
ws2_32
recv
Sections
.text Size: 5.1MB - Virtual size: 26.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE