Static task
static1
Behavioral task
behavioral1
Sample
06a025306e7e5f4647939aec0e4a17ea6518ac4224a44054d0465440ed782522.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
06a025306e7e5f4647939aec0e4a17ea6518ac4224a44054d0465440ed782522.exe
Resource
win10v2004-20231025-en
General
-
Target
06a025306e7e5f4647939aec0e4a17ea6518ac4224a44054d0465440ed782522
-
Size
408KB
-
MD5
65a9c7fc6a4401292018550506a598dd
-
SHA1
f481e8b330f401576181f7e163910679b91f32a0
-
SHA256
06a025306e7e5f4647939aec0e4a17ea6518ac4224a44054d0465440ed782522
-
SHA512
9ab88b34c6397733da26ac482e624c6149bf332f9001ca02523fc8fc06479461078ce5bd3081108efbe28a73e88acc720ffe041704c8ee13108a0de39fc2e242
-
SSDEEP
6144:KpIGH2a2/rCT+9A4QY2K2lNBVbM3fZ/6PcHDX3gC1Ii:Kpkad+9A40xmx8cHx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06a025306e7e5f4647939aec0e4a17ea6518ac4224a44054d0465440ed782522
Files
-
06a025306e7e5f4647939aec0e4a17ea6518ac4224a44054d0465440ed782522.exe windows:4 windows x86
0e248a06fc4c55815bc5c9cc169c2db0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
PlaySoundW
kernel32
lstrcmpiW
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
GetCurrentProcess
MulDiv
GlobalUnlock
GlobalLock
GlobalAlloc
SetLastError
SetEvent
CloseHandle
WaitForSingleObject
CreateThread
CreateEventA
Sleep
GetCommandLineA
HeapFree
GetProcessHeap
InterlockedExchange
CreateMutexA
ReleaseMutex
CreateFileW
GlobalFree
CreateFileA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
IsValidCodePage
GetOEMCP
GetACP
SetFilePointer
ReadFile
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetFileType
SetHandleCount
HeapSize
GetStdHandle
WriteFile
HeapCreate
HeapDestroy
VirtualFree
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
ExitProcess
GetCPInfo
LCMapStringW
LCMapStringA
DeleteFileW
IsDBCSLeadByte
OutputDebugStringA
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
GetCurrentProcessId
CreateToolhelp32Snapshot
Thread32First
Thread32Next
lstrcmpiA
lstrlenA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
InterlockedCompareExchange
GetThreadLocale
FindFirstFileA
LoadLibraryExA
FindNextFileA
FreeLibrary
GetProcAddress
GetModuleFileNameA
VirtualQuery
IsProcessorFeaturePresent
CreateDirectoryW
GetFileAttributesW
GetLocaleInfoA
SetFileAttributesW
SetEndOfFile
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
LoadLibraryA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetStartupInfoA
GetVersionExA
GetFileAttributesA
HeapReAlloc
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapAlloc
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
user32
UnregisterClassA
DispatchMessageA
PostThreadMessageA
CreateWindowExA
GetMessageA
GetKeyState
InvalidateRect
IsWindow
GetFocus
IsChild
SetFocus
UnionRect
PtInRect
CallWindowProcA
BeginPaint
EndPaint
IntersectRect
EqualRect
OffsetRect
SetWindowRgn
SetWindowPos
GetDC
ReleaseDC
LoadCursorA
GetClassInfoExA
ShowWindow
GetClientRect
DefWindowProcA
DestroyWindow
PostMessageA
GetWindowLongA
SetWindowLongA
CharNextA
RegisterClassExA
gdi32
LPtoDP
SetMapMode
SetViewportOrgEx
DeleteDC
CreateDCA
Rectangle
SetTextAlign
TextOutA
CreateMetaFileA
SaveDC
SetWindowOrgEx
SetWindowExtEx
RestoreDC
CloseMetaFile
DeleteMetaFile
CreateRectRgnIndirect
GetDeviceCaps
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
ole32
CoRegisterClassObject
CoRevokeClassObject
OleSaveToStream
WriteClassStm
CreateDataAdviseHolder
OleRegGetMiscStatus
CoCreateInstance
OleRegEnumVerbs
CreateOleAdviseHolder
OleLoadFromStream
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
StringFromGUID2
CoInitialize
CoUninitialize
OleRegGetUserType
oleaut32
UnRegisterTypeLi
RegisterTypeLi
SysAllocStringLen
VarUI4FromStr
SysAllocStringByteLen
SysFreeString
OleCreatePropertyFrame
LoadTypeLi
LoadRegTypeLi
SysStringLen
VariantChangeType
VariantClear
VariantInit
SysStringByteLen
SysAllocString
shlwapi
PathAddBackslashA
PathAppendA
PathRemoveFileSpecA
Sections
.text Size: 328KB - Virtual size: 325KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ