Static task
static1
Behavioral task
behavioral1
Sample
6a9c464680d0a3af4a760ddbe88df9c11b723c253247e4f86206936e10a9622c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6a9c464680d0a3af4a760ddbe88df9c11b723c253247e4f86206936e10a9622c.exe
Resource
win10v2004-20230915-en
General
-
Target
6a9c464680d0a3af4a760ddbe88df9c11b723c253247e4f86206936e10a9622c
-
Size
1.5MB
-
MD5
20fc1f00b8406a14adc61ded10254c6d
-
SHA1
2e49f5497897a8cd8a1092fe5a0e4ae68c2a7c10
-
SHA256
6a9c464680d0a3af4a760ddbe88df9c11b723c253247e4f86206936e10a9622c
-
SHA512
a57797bbae44d85b5aee2e2bfd9772b2170578a7a92b6dbdf1f8b8982e93d1757eeedb76bcc08995c357c9adcb70461ede1589545894774c80720e4c8f838ffa
-
SSDEEP
24576:DtdK6myKr8+r66ipGMiRFxUy8A3a7NRx8BCEqPv+sPv8KTKbV/VwcOUQtWKxueu:DnmyK5r66i4MGVmRkBEvmbbVdwHtWKI5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a9c464680d0a3af4a760ddbe88df9c11b723c253247e4f86206936e10a9622c
Files
-
6a9c464680d0a3af4a760ddbe88df9c11b723c253247e4f86206936e10a9622c.exe windows:4 windows x86
5357b42bf767f1a2ddf29ab889b8ea24
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
closesocket
kernel32
SetFilePointer
user32
IsIconic
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ord17
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 448KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 984KB - Virtual size: 984KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ