Static task
static1
Behavioral task
behavioral1
Sample
6c0f01a36496afdd937aa72b4b482aba.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6c0f01a36496afdd937aa72b4b482aba.exe
Resource
win10v2004-20231215-en
General
-
Target
6c0f01a36496afdd937aa72b4b482aba
-
Size
21KB
-
MD5
6c0f01a36496afdd937aa72b4b482aba
-
SHA1
c4e5b747598ac6ccad68e2fcc3be76686ea1a9e1
-
SHA256
16b13dd16c5faf0b49a4786a499bdabbcbbd5b0feb99a3e9f7b55706a56727b6
-
SHA512
3b30233790fdd752d4bca16e17c8958753bc22260ec3f99597463456138a47c68bcbfd40bae985408ef95f943837fa7c305b3454337b6eaed41baa1da76ab6d2
-
SSDEEP
192:FSMzmsXJciv0svTF76GJufr9PJArRWSjyJ3rDbrnm1m9:kkJB8svTF+GQ9CRDjyJPnn8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c0f01a36496afdd937aa72b4b482aba
Files
-
6c0f01a36496afdd937aa72b4b482aba.exe windows:4 windows x86 arch:x86
89d14b11ae55e630a31db0e002811fc5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetCommandLineA
GetModuleHandleA
GetVersionExA
CreateEventA
GetStdHandle
LocalAlloc
GetStartupInfoA
GetLastError
user32
GetClientRect
GetSysColor
ShowWindow
GetFocus
SetFocus
SetWindowTextA
EndDialog
TranslateMessage
DefWindowProcA
MessageBoxA
PostQuitMessage
gdi32
CreateCompatibleDC
SetROP2
CreateFontIndirectA
ExtTextOutA
PatBlt
SelectObject
LineTo
SetPixel
GetTextColor
GetTextExtentPoint32A
GetBkColor
GetObjectA
GetStockObject
DeleteObject
GetDeviceCaps
MoveToEx
GetTextMetricsA
CreateSolidBrush
GetPixel
SetBkMode
msvcrt
_adjust_fdiv
_controlfp
__CxxFrameHandler
wcslen
_XcptFilter
_initterm
memmove
_c_exit
wcstoul
exit
rand
__getmainargs
_except_handler3
_acmdln
__p__commode
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ