Static task
static1
Behavioral task
behavioral1
Sample
6b680da136ff542c423321945c4ef0cb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6b680da136ff542c423321945c4ef0cb.exe
Resource
win10v2004-20231222-en
General
-
Target
6b680da136ff542c423321945c4ef0cb
-
Size
130KB
-
MD5
6b680da136ff542c423321945c4ef0cb
-
SHA1
6161756a8a0c3d372fbee10775ea8b44211fad05
-
SHA256
e8a341e16d69c71ba9d48a94633f8e8d3ccdbb8cd78bdb8b6dd9540fde362b5e
-
SHA512
d639c743d1e9a8163a387452ce16a4fbf92d6886a5ba943a2eda0b591f97b59144f01e934bbf521a067a3998ae6b25c386629426ebcc2603b5505f2908fe9708
-
SSDEEP
3072:ugxMYs0F5kGvlbjWLMUOp58YSm+HCoRiiI:uYMYs0F5H9jPUOp5lSmMWiI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b680da136ff542c423321945c4ef0cb
Files
-
6b680da136ff542c423321945c4ef0cb.exe windows:4 windows x86 arch:x86
704d4b79768fb110aa5206d638839050
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
ScaleViewportExtEx
EndPath
UnrealizeObject
CreateRectRgn
PatBlt
GetClipBox
CreateBitmap
CreatePen
SetDIBColorTable
GetCharWidth32A
MoveToEx
CreatePatternBrush
SetTextColor
GetDeviceCaps
SetBkColor
ExcludeClipRect
SetROP2
MaskBlt
GetPaletteEntries
CreateCompatibleBitmap
EndDoc
SetWindowExtEx
BeginPath
OffsetViewportOrgEx
GetPixel
SaveDC
SetStretchBltMode
GetEnhMetaFilePaletteEntries
Rectangle
DPtoLP
SetBrushOrgEx
GetDCOrgEx
StartPage
IntersectClipRect
StretchBlt
SetViewportOrgEx
LineTo
SelectPalette
SetBkMode
DeleteObject
GetTextMetricsA
DeleteDC
PlayEnhMetaFile
SelectObject
SetColorSpace
GetStockObject
GetDIBColorTable
user32
CharNextA
kernel32
DeleteFileA
lstrcmpiA
SetCurrentDirectoryA
GetCurrentThread
GetModuleHandleW
GetCurrentProcess
lstrlenW
MulDiv
GetProcessHeap
GetOEMCP
GetTickCount
GlobalFindAtomW
GlobalFindAtomA
GetModuleHandleA
IsDebuggerPresent
GetCommandLineA
CopyFileA
GetCommandLineW
GetVersion
lstrcmpA
GetThreadLocale
GetCurrentThreadId
lstrlenA
GetConsoleOutputCP
SetLastError
DeleteFileW
GetACP
GetCurrentProcessId
GetLastError
RemoveDirectoryA
GetUserDefaultLangID
VirtualAlloc
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ