Static task
static1
Behavioral task
behavioral1
Sample
6bb62eff452317426f5914564c4832daedde9dff7ae92388efcb50e32fc5de61.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
6bb62eff452317426f5914564c4832daedde9dff7ae92388efcb50e32fc5de61.exe
Resource
win10v2004-20231025-en
General
-
Target
6bb62eff452317426f5914564c4832daedde9dff7ae92388efcb50e32fc5de61
-
Size
52KB
-
MD5
3f42166e314f20cff97dbb37e5b4b58e
-
SHA1
08462f3dd79bcbd762e2ede12c6dcfaaf502a87a
-
SHA256
6bb62eff452317426f5914564c4832daedde9dff7ae92388efcb50e32fc5de61
-
SHA512
91299591b52dd93f775854352877240c989e09113c60530dd948868da1b8108d4228a0e533db1b051619ada740d66a0e4c27000699eb36ededb8d1a18b0a8d5c
-
SSDEEP
768:AjC+1a4Wm5344HPeKl2I/BrfgUV3Hyt9cWRUaTPRS:4fzeIfZrfgUVsjlTPR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6bb62eff452317426f5914564c4832daedde9dff7ae92388efcb50e32fc5de61
Files
-
6bb62eff452317426f5914564c4832daedde9dff7ae92388efcb50e32fc5de61.exe windows:5 windows x86
ef4c370b891d94e3a127231ed15be67a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
vDbgPrintExWithPrefix
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentVariableA
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
LocalAlloc
LocalFree
LocalReAlloc
QueryPerformanceCounter
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WriteConsoleW
WriteFile
msvcrt
__dllonexit
__lconv_init
__set_app_type
__setusermatherr
__wgetmainargs
__winitenv
_amsg_exit
_cexit
_fmode
_fpreset
_initterm
_iob
_lock
_onexit
_snwprintf
_unlock
_vsnprintf
_vsnwprintf
_wcmdln
_wcsicmp
abort
bsearch
calloc
exit
fprintf
free
fwrite
malloc
memcmp
memmove
signal
sprintf
strchr
strcmp
strcpy
strcspn
strncmp
vfprintf
wcscat
wcscpy
wcslen
ole32
CoCreateInstance
CoInitialize
CoInitializeSecurity
CoUninitialize
oleaut32
SafeArrayDestroy
SafeArrayGetElement
SafeArrayGetUBound
SysAllocString
SysAllocStringLen
SysFreeString
VariantChangeType
VariantClear
user32
LoadStringW
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 5KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rossym Size: 27KB - Virtual size: 26KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ