Static task
static1
Behavioral task
behavioral1
Sample
cb6c640fbc6289b261bca0ee881bfcc8c4df2e89baaab7a4fed4e0e3b0dc9d37.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
cb6c640fbc6289b261bca0ee881bfcc8c4df2e89baaab7a4fed4e0e3b0dc9d37.exe
Resource
win10-20231020-en
General
-
Target
cb6c640fbc6289b261bca0ee881bfcc8c4df2e89baaab7a4fed4e0e3b0dc9d37
-
Size
1.1MB
-
MD5
993c85b5b1c94bfa3b7f45117f567d09
-
SHA1
cb704e8d65621437f15a21be41c1169987b913de
-
SHA256
cb6c640fbc6289b261bca0ee881bfcc8c4df2e89baaab7a4fed4e0e3b0dc9d37
-
SHA512
182d6cb6f3e6618375e8e793c6ce5d3c73da8183d4acad8bad60f35242c264260423e22a68ea64022c9c0c61b226edc4dd3791e6947e42c418355baa623e1f24
-
SSDEEP
12288:1SCFweWT8xCrC9ihr40AZWUBmEYvWe0kRUj8apA331/ZLGpn2OZ4H3ro:1lFweWT8x/9Ir40O8FvWeEJy3JZY63r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb6c640fbc6289b261bca0ee881bfcc8c4df2e89baaab7a4fed4e0e3b0dc9d37
Files
-
cb6c640fbc6289b261bca0ee881bfcc8c4df2e89baaab7a4fed4e0e3b0dc9d37.exe windows:6 windows x86
1cae6a1b35a594d33372747b6f84b66d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
closesocket
WSACleanup
WSAStartup
socket
send
recv
htons
connect
inet_pton
crypt32
CryptUnprotectData
wininet
InternetReadFile
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetOpenW
HttpQueryInfoW
InternetQueryDataAvailable
ntdll
NtQuerySystemInformation
NtQueryObject
rstrtmgr
RmStartSession
RmEndSession
RmRegisterResources
RmGetList
kernel32
LocalFree
MultiByteToWideChar
WideCharToMultiByte
ResumeThread
CreateProcessA
GetThreadContext
SetThreadContext
VirtualAlloc
VirtualAllocEx
ReadProcessMemory
WriteProcessMemory
GetModuleFileNameA
ExitProcess
GetFileSize
GetFinalPathNameByHandleA
GetLogicalDriveStringsW
GetVolumeInformationW
ReadFile
SetFilePointer
DecodePointer
CloseHandle
RaiseException
GetLastError
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
GetCurrentProcess
GetProcessId
OpenProcess
GlobalMemoryStatusEx
GetNativeSystemInfo
GetProductInfo
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetComputerNameW
GetTimeZoneInformation
GetGeoInfoA
GetUserGeoID
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
TerminateProcess
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetCurrentProcessId
VirtualProtect
VirtualQuery
GetCurrentThreadId
FreeLibrary
GetModuleHandleExW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
GetStartupInfoW
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
SetStdHandle
GetModuleFileNameW
CreateFileW
WriteConsoleW
EncodePointer
SetEndOfFile
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
QueryPerformanceCounter
InitializeSListHead
RtlUnwind
LCMapStringEx
GetCommandLineA
GetCommandLineW
GetSystemInfo
OutputDebugStringW
GetFileInformationByHandleEx
AreFileApisANSI
GetFileAttributesExW
FormatMessageA
GetLocaleInfoEx
GetCurrentDirectoryW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
user32
GetDesktopWindow
GetSystemMetrics
ReleaseDC
GetWindowRect
EnumDisplayDevicesW
GetDC
gdi32
GetObjectW
SelectObject
GetDeviceCaps
DeleteObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
advapi32
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
GetCurrentHwProfileW
GetUserNameW
RegQueryValueExA
shell32
SHGetKnownFolderPath
ole32
CreateStreamOnHGlobal
CoTaskMemFree
shlwapi
ord184
ord214
ord213
gdiplus
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipSaveImageToStream
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdiplusShutdown
GdipDisposeImage
Sections
.text Size: 892KB - Virtual size: 892KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ