Static task
static1
Behavioral task
behavioral1
Sample
6325791a019287dbeec8ffad49998514.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6325791a019287dbeec8ffad49998514.exe
Resource
win10v2004-20231222-en
General
-
Target
6325791a019287dbeec8ffad49998514
-
Size
3.4MB
-
MD5
6325791a019287dbeec8ffad49998514
-
SHA1
2dd1a5b428147900d1cff7642f4951bf3790e2f3
-
SHA256
88ebeb7101d2bc9ea81479aea7713553f1df8a8a0deb44412797ad9aa323838c
-
SHA512
fcca154d78c0b0b2efe06e7fc588c9fb6c16c844b1bf6c24a2aaaca02cfb5a3802365ee0d2c93280315e5ca25a4e65288ef346326eac782ee2e3f69c5e8ebb01
-
SSDEEP
98304:bURshOpGImGnL4udL+Eyh3n/3Ou/9/DNZBDgeTu9v:bURshOQImGaEyhv3OcBBDgeTu9v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6325791a019287dbeec8ffad49998514
Files
-
6325791a019287dbeec8ffad49998514.exe windows:4 windows x86 arch:x86
7b7ac51d0ceb9f78dc7b4847f19e63ab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetCurrentThreadId
GetCurrentProcess
QueryPerformanceCounter
GetProcAddress
TerminateProcess
UnhandledExceptionFilter
FreeLibrary
SetLastError
LocalFree
DeleteCriticalSection
EnterCriticalSection
WriteFile
GetProcessHeap
CreateFileW
GetModuleFileNameW
GetStartupInfoW
GetCommandLineW
FindClose
RaiseException
SetEvent
GetFileType
InitializeCriticalSection
HeapReAlloc
FlushFileBuffers
TlsSetValue
TlsAlloc
WriteConsoleW
LoadLibraryW
LoadLibraryExW
GetCPInfo
RtlUnwind
GetModuleFileNameA
GetOEMCP
GetEnvironmentStringsW
VirtualAlloc
GetConsoleCP
GetCommandLineA
DecodePointer
OutputDebugStringW
GetFileSize
EncodePointer
lstrlenW
LoadLibraryA
GetModuleHandleExW
GetLocaleInfoW
GetExitCodeProcess
ExpandEnvironmentStringsW
CreateProcessW
user32
TranslateMessage
LoadStringW
DispatchMessageW
ReleaseDC
MessageBoxW
PostQuitMessage
SetWindowLongW
GetWindowLongW
GetDC
GetWindowRect
PostMessageW
SendMessageW
GetClientRect
EnableWindow
GetParent
SetWindowTextW
SetTimer
PeekMessageW
BeginPaint
KillTimer
EnableMenuItem
GetWindow
UpdateWindow
Sections
.data Size: - Virtual size: 612KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ