Static task
static1
Behavioral task
behavioral1
Sample
6cac6172ca47c81c8442b7ff934dff69.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6cac6172ca47c81c8442b7ff934dff69.exe
Resource
win10v2004-20231215-en
General
-
Target
6cac6172ca47c81c8442b7ff934dff69
-
Size
208KB
-
MD5
6cac6172ca47c81c8442b7ff934dff69
-
SHA1
0d2521d8abd0fa29a05ce70c17f662fdc298525c
-
SHA256
e28ab05d517b368e8814a7af47e9656b0ce503d8814c3d86656384c11445de3c
-
SHA512
530a580e91d9efff7ffa4929e69514488043f5ef01da6afd6e2da4a796f7feca37584225174b7a350ffe4f4a3ed957e8e9e26a32c3b9587f15c2bba53ad94cc9
-
SSDEEP
6144:ZX6fL/hPFb+zMaLYPJMRL6zYiwOoxxYQz+LvbIjZAhg:ZX+FbyHcuRL6zIXiDwZUg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6cac6172ca47c81c8442b7ff934dff69
Files
-
6cac6172ca47c81c8442b7ff934dff69.exe windows:5 windows x86 arch:x86
44fecaa683cfe0eed78a8836d68948bf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
winmm
PlaySoundW
hookpr
InjectDll
user32
InvalidateRgn
gdi32
ExtSelectClipRgn
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
advapi32
RegEnumKeyW
shell32
Shell_NotifyIconW
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameW
oledlg
OleUIBusyW
ole32
CoTaskMemFree
oleaut32
SysStringLen
wsock32
closesocket
psapi
GetModuleBaseNameW
Sections
.text Size: 194KB - Virtual size: 652KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE