Static task
static1
Behavioral task
behavioral1
Sample
6aaf7ee0e051a882c6c6d57552f5c27c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6aaf7ee0e051a882c6c6d57552f5c27c.exe
Resource
win10v2004-20231215-en
General
-
Target
6aaf7ee0e051a882c6c6d57552f5c27c
-
Size
47KB
-
MD5
6aaf7ee0e051a882c6c6d57552f5c27c
-
SHA1
7d12aa2949a7878d3a9401a4536eb79e97f61660
-
SHA256
19f1586dda58be9593f1ed1ad364c340c163e233f13419a63d8cd14e259a1dc2
-
SHA512
55c33f6bfe3024cf52c5a76d115405e39793c095668752420b7bb1f3b56dde13ede887ca3c745c759fe17c3a7e7c8cd6146a5ed181fe74d00afcc883507eca4f
-
SSDEEP
768:aPlXnWvmzVAc+Hqk7HhK2jIH4bqrqXktj6PO4XGgQDdInQM3Scxzeti9wLV2VHFz:uCuSHqt2Z3XqOjWNDGiGzYi2LV2VHFA4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6aaf7ee0e051a882c6c6d57552f5c27c
Files
-
6aaf7ee0e051a882c6c6d57552f5c27c.exe windows:4 windows x86 arch:x86
eeb396fabaf2bb99078c411a93e46e9a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
FreeLibrary
GetCurrentThreadId
LocalReAlloc
SetUnhandledExceptionFilter
GetCurrentProcessId
GetACP
GetTickCount
GetSystemTimeAsFileTime
LocalAlloc
lstrlenW
MulDiv
VirtualAlloc
QueryPerformanceCounter
GetModuleHandleA
activeds
FreeADsMem
gdi32
DeleteObject
SelectObject
SetBkColor
GetTextMetricsW
TranslateCharsetInfo
SetTextColor
CreateFontIndirectW
ExtTextOutW
GetStockObject
CreatePen
GetDeviceCaps
Polyline
SetROP2
SetTextAlign
avifil32
AVIFileOpen
msvcrt
_chdir
exit
_beginthread
user32
SetWindowLongW
SendMessageW
RegisterClassW
GetSystemMetrics
RedrawWindow
GetDC
BeginPaint
DrawFocusRect
GetSysColor
DialogBoxParamW
LoadCursorW
CheckDlgButton
EndPaint
DefWindowProcW
GetParent
GetDlgItem
SetWindowPos
ReleaseDC
SetRect
GetWindowLongW
GetClientRect
EndDeferWindowPos
EndDialog
SetFocus
UnregisterClassW
IsDlgButtonChecked
GetDlgCtrlID
BeginDeferWindowPos
DeferWindowPos
CreateWindowExW
Sections
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.textbss Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE