Static task
static1
Behavioral task
behavioral1
Sample
6b4654f7c7a8d6d6bc52df10fbce68ee.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6b4654f7c7a8d6d6bc52df10fbce68ee.exe
Resource
win10v2004-20231215-en
General
-
Target
6b4654f7c7a8d6d6bc52df10fbce68ee
-
Size
209KB
-
MD5
6b4654f7c7a8d6d6bc52df10fbce68ee
-
SHA1
f1999cbe5f8f40f5b8ee19ac4821dae77e7bfe70
-
SHA256
741dee0db760befb6d92b9b1b989c7be13d8c79c9298fd685e2ca9f9ad13a972
-
SHA512
58c2cb369d95638941b4f3b179aceee7aa919c9588ab65c97fbc3f8a0f5d9d60272f3d0f47208a8e61066fa2c2cabb4390a0cb58f7acf0487c81a2021930452a
-
SSDEEP
3072:5ZHyUAKM1a39WZpU/dQj2nQOPc+Jn5SqJsLUHJjCy+uE/LN:5ZHyfKqMwOdg2nhrJn8wsLUHHEJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b4654f7c7a8d6d6bc52df10fbce68ee
Files
-
6b4654f7c7a8d6d6bc52df10fbce68ee.exe windows:1 windows x86 arch:x86
510a74e1988d517677eb4f8957dd6078
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
TerminateProcess
ExitProcess
FindFirstFileA
ExitThread
Sleep
SetProcessWorkingSetSize
DuplicateHandle
LoadResource
GetProcessWorkingSetSize
CloseHandle
UnmapViewOfFile
SetPriorityClass
OpenProcess
GetStartupInfoA
HeapAlloc
GetTickCount
GetCurrentThread
GetSystemInfo
LeaveCriticalSection
GetEnvironmentStrings
HeapSize
SetFilePointer
GetNumberFormatA
TlsAlloc
GetCurrentProcess
FindClose
GlobalMemoryStatus
GetDriveTypeA
GetModuleHandleA
IsBadReadPtr
GetCommandLineA
GetProcessAffinityMask
GetCurrentThreadId
GetSystemTimeAsFileTime
GlobalAddAtomA
HeapFree
GetConsoleCP
GetStringTypeW
DeviceIoControl
SetStdHandle
CreateEventA
user32
IsDialogMessageA
IntersectRect
DestroyIcon
GetCapture
RegisterClassA
RedrawWindow
ReleaseCapture
SetMenuItemInfoA
SystemParametersInfoA
SetWindowTextA
DialogBoxParamA
LoadMenuA
GetWindowRect
DestroyWindow
EndDeferWindowPos
DefMDIChildProcA
GetDlgItem
SetFocus
CheckRadioButton
CreatePopupMenu
LoadAcceleratorsA
InvalidateRgn
LoadImageA
GetMenuItemCount
TranslateAcceleratorA
GetWindowDC
SetClassLongA
ScreenToClient
DispatchMessageA
ReleaseDC
GetParent
GetClassNameA
ShowWindowAsync
DeleteMenu
CallWindowProcA
GetSysColor
msvcrt
__setusermatherr
_adjust_fdiv
memcpy
_exit
_except_handler3
exit
_controlfp
__p__commode
__p__fmode
__getmainargs
_XcptFilter
__set_app_type
_initterm
_acmdln
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ