Static task
static1
Behavioral task
behavioral1
Sample
6ab8568c24fd8c36d9048d50a2667abe.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6ab8568c24fd8c36d9048d50a2667abe.exe
Resource
win10v2004-20231215-en
General
-
Target
6ab8568c24fd8c36d9048d50a2667abe
-
Size
21KB
-
MD5
6ab8568c24fd8c36d9048d50a2667abe
-
SHA1
c6d61ef90e7080ed35bbfaa27e40e88499e543f4
-
SHA256
06c8e8fd945f8426c54e4121b1f8451bbfd8c021e1b988976f71813d6208e5c7
-
SHA512
b550eac4da42e375285581c2702c531fc3270f4e432b2d217ed152e47a822669ce14aed4283ae41f43b5f8b3a6db8186bb406d455c8a27479428924495bda8d8
-
SSDEEP
192:qavtK8e4RhsC5N5FOLu6OtZRal+NHNNEDO6PKOAkJOVn8LkTOdKG2GdarMZX9iiZ:T5/J5N5FLzZs+mC6VNwUKP8ciCGxr9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ab8568c24fd8c36d9048d50a2667abe
Files
-
6ab8568c24fd8c36d9048d50a2667abe.exe windows:4 windows x86 arch:x86
825f8ec6f66cfd4d23f02eee2cb4122d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
CloseHandle
GetModuleHandleA
HeapCreate
ReleaseMutex
InitializeCriticalSection
GetStartupInfoW
GetTickCount
ResetEvent
WaitForSingleObject
SuspendThread
CreateMutexW
FindClose
AddAtomA
GetEnvironmentVariableA
HeapSize
SetEndOfFile
DeleteFileA
GetCurrentDirectoryA
HeapDestroy
GetSystemInfo
GetTickCount
ExitProcess
GetFileSize
FindClose
wininet
FtpPutFileA
FtpOpenFileA
HttpQueryInfoA
FtpCreateDirectoryA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpGetFileA
FindCloseUrlCache
FtpGetCurrentDirectoryA
HttpEndRequestA
FtpFindFirstFileA
DeleteUrlCacheEntryA
FtpDeleteFileA
mscpxl32
ConfigureDlgProc
ConfigureDlgProc
ConfigureDlgProc
ConfigureDlgProc
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ