Static task
static1
Behavioral task
behavioral1
Sample
6070966f7cf2d548a076e81afc0a4874435ff70838b803d2ac2edcf3fb69332a.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
6070966f7cf2d548a076e81afc0a4874435ff70838b803d2ac2edcf3fb69332a.exe
Resource
win10v2004-20231023-en
General
-
Target
6070966f7cf2d548a076e81afc0a4874435ff70838b803d2ac2edcf3fb69332a
-
Size
224KB
-
MD5
224d3061e20fc982557b32c9b15018c3
-
SHA1
b98d9cc19f43903cadae24016a5d66b8f7c1147b
-
SHA256
6070966f7cf2d548a076e81afc0a4874435ff70838b803d2ac2edcf3fb69332a
-
SHA512
25bb57f8087afff918900593a92d97bdbf9670b2a4092c5ab45bfcffbf8bc13540476fd6e10da6382cd0fd1a3716e5789ba14d0268a00c592645ccdf9738c2db
-
SSDEEP
6144:ayMvvRcGLKZH2FaLw9hH4JdBV+UdvrEFp7hK3eRj:ayMvvf9hH4JdBjvrEH7pJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6070966f7cf2d548a076e81afc0a4874435ff70838b803d2ac2edcf3fb69332a
Files
-
6070966f7cf2d548a076e81afc0a4874435ff70838b803d2ac2edcf3fb69332a.exe windows:6 windows x86
23b9079896617a8a01351c21a6caa337
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
GetLogicalDrives
GetFileSizeEx
GetCommandLineW
lstrlenW
WriteFile
DeviceIoControl
LoadLibraryExA
GetUserDefaultUILanguage
CreateMutexA
GetVolumeInformationA
CreateFileW
GetFileAttributesW
GetCurrentDirectoryA
MultiByteToWideChar
GetLastError
CreateFileA
SetDllDirectoryA
CloseHandle
LoadLibraryW
GetCurrentDirectoryW
GetProcAddress
WideCharToMultiByte
lstrcmpW
DecodePointer
SetEndOfFile
ReadConsoleW
HeapReAlloc
HeapSize
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
FreeLibrary
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetStdHandle
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetFileType
GetTimeZoneInformation
CompareStringW
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
GetProcessHeap
WriteConsoleW
user32
EndDialog
SetWindowTextW
MessageBoxW
LoadIconW
GetDlgItem
EnableWindow
DialogBoxParamA
SendMessageW
Sections
.text Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ