Static task
static1
Behavioral task
behavioral1
Sample
6ac8cb5e70c44ea207b8ab83d4a13652.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6ac8cb5e70c44ea207b8ab83d4a13652.exe
Resource
win10v2004-20231215-en
General
-
Target
6ac8cb5e70c44ea207b8ab83d4a13652
-
Size
834KB
-
MD5
6ac8cb5e70c44ea207b8ab83d4a13652
-
SHA1
bf617ad21b4c5561e2b684f37512e10a9710c5e9
-
SHA256
24b3d0a093a1f91f7f81c154ac113522da35172fef1073b87e1a3221b7993394
-
SHA512
fe0b350244fc3a5c43bf404265d861e607c25ab7eae75040d8858a204abac03ae27ebc859309c96a999088407b4ff98d48f0d7be646512c094557508d7e7d859
-
SSDEEP
24576:hf14xY8OjF/3Wsd5yzemijjVKvV6B5RTKKWtw:hd4xY7jJD5e8wve5new
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ac8cb5e70c44ea207b8ab83d4a13652
Files
-
6ac8cb5e70c44ea207b8ab83d4a13652.exe windows:5 windows x86 arch:x86
372393d28c30e8945c6178d414dcd065
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glTexParameteri
glTexGend
glRectfv
glRasterPos3s
glPolygonOffset
glPixelTransferi
glIndexubv
glRasterPos3fv
glColorPointer
glTexSubImage1D
glLightf
glRectd
wglGetLayerPaletteEntries
glVertex4f
wglSwapMultipleBuffers
glTexGeniv
glRectf
glLightModeli
wglChoosePixelFormat
glGenLists
glRasterPos3sv
glColor4b
glEdgeFlagPointer
kernel32
CmdBatNotification
ReadConsoleInputA
SearchPathA
RegisterWowExec
ReplaceFileA
ChangeTimerQueueTimer
OpenEventW
HeapValidate
BeginUpdateResourceA
GetDefaultCommConfigA
GetConsoleCommandHistoryLengthA
SetEndOfFile
WriteFileGather
SetSystemTime
WriteConsoleW
SetConsoleNumberOfCommandsW
GlobalFindAtomW
EndUpdateResourceW
GetProcAddress
GetVolumeInformationA
LoadLibraryW
BaseCheckAppcompatCache
Module32Next
MapUserPhysicalPages
VirtualUnlock
TlsSetValue
SetLastError
WriteProfileStringW
RemoveVectoredExceptionHandler
msoert2
HrRewindStream
PszDupA
CreateStreamOnHFile
PszToUnicode
FIsEmptyA
CreateNotify
PszScanToWhiteA
OpenFileStream
FIsHTMLFileW
PVDecodeObject
HrIStreamWToBSTR
BrowseForFolder
MessageBoxInst
StripCRLF
PszSkipWhiteA
UnlocStrEqNW
HrGetCertKeyUsage
HrCopyStreamCB
FMissingCert
HrCopyStreamToByte
strtrimW
HrLPSZToBSTR
IVoidPtrList_CreateInstance
netapi32
NlBindingAddServerToCache
NetReplExportDirAdd
Netbios
NetpCopyFtinfoContext
NetFileEnum
I_NetAccountSync
NetReplImportDirUnlock
I_NetServerPasswordGet
I_NetLogonControl2
RxNetAccessEnum
DsGetDcNameWithAccountA
NetpGetConfigBool
NetEnumerateComputerNames
NetApiBufferSize
NetServerEnum
NetUserGetInfo
NetGetDisplayInformationIndex
NetServerComputerNameDel
NetUserGetLocalGroups
DsRoleCancel
NetServiceEnum
NetGroupEnum
NetGroupSetInfo
NetRegisterDomainNameChangeNotification
NetLocalGroupGetInfo
NetServerTransportAddEx
NetShareDel
I_NetDatabaseSync2
NetFileGetInfo
msvcrt
__getmainargs
_mbsstr
_atoldbl
_mbschr
_endthread
__set_app_type
_CIfmod
__p__commode
_spawnve
_onexit
__p___initenv
wcstod
_wsetlocale
_heapset
tmpfile
wcsrchr
fwprintf
isdigit
exit
iswspace
loadperf
UpdatePerfNameFilesW
InstallPerfDllW
BackupPerfRegistryToFileW
LoadPerfCounterTextStringsW
LoadPerfCounterTextStringsA
UnloadPerfCounterTextStringsW
UnloadPerfCounterTextStringsA
UpdatePerfNameFilesA
InstallPerfDllA
SetServiceAsTrustedW
user32
PostQuitMessage
RegisterClassW
DefWindowProcW
Sections
.text Size: 407KB - Virtual size: 407KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 189KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ