Static task
static1
Behavioral task
behavioral1
Sample
6c19a059461b88c518103d6aa7ba9503.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6c19a059461b88c518103d6aa7ba9503.exe
Resource
win10v2004-20231215-en
General
-
Target
6c19a059461b88c518103d6aa7ba9503
-
Size
172KB
-
MD5
6c19a059461b88c518103d6aa7ba9503
-
SHA1
afb1c6c2e141f116447d6be8889fe9c0f713a6a5
-
SHA256
e8230d711fc9fa805b0651564ce863e19ccdf8121cd33b9958089fd8cd932da8
-
SHA512
089961325aaed4c0d62d1e7fb7c2f91876f56a24e5b73ccb65cf847279cb93201afe92ad01b7aa06665cad76a0f3b43a38a8d37f689e910237d788542ec1935c
-
SSDEEP
3072:QG01q0xcnx7tsRr4TMpWnMTOlLC4bVHaxCxcHixIbpUuiUTlnjWK:mxcg+x6yxbkHixIbpZDT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c19a059461b88c518103d6aa7ba9503
Files
-
6c19a059461b88c518103d6aa7ba9503.exe windows:4 windows x86 arch:x86
f322af2919acd0f21b890d5f9ed74843
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
FreeLibrary
LoadLibraryW
VirtualQuery
GetModuleFileNameA
VirtualAlloc
GetLastError
PulseEvent
lstrcpyA
lstrlenA
VirtualFree
GetModuleHandleA
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceExA
VirtualProtect
HeapAlloc
GetCurrentThread
HeapCreate
InterlockedDecrement
DeleteFileA
ReadFile
CreateFileA
LocalAlloc
GlobalFree
WriteFile
GlobalAlloc
SystemTimeToFileTime
GetSystemTime
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
GetStartupInfoA
DebugBreak
HeapReAlloc
HeapFree
GetProcAddress
SetThreadPriority
ExitProcess
GetCommandLineA
GetCurrentThreadId
lstrcmpiA
Sleep
CreateEventA
CreateThread
WaitForSingleObject
CloseHandle
GetSystemInfo
SetEvent
user32
ShowWindow
CreateWindowExA
PostQuitMessage
EndPaint
DrawTextA
GetClientRect
BeginPaint
DefWindowProcA
UpdateWindow
DialogBoxParamA
LoadCursorA
GetDesktopWindow
GetDC
IsWindowVisible
UnregisterClassA
PeekMessageA
DestroyWindow
LoadIconA
TranslateMessage
EnumDisplaySettingsA
DrawIcon
GetMessageA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
EndDialog
DispatchMessageA
CharNextA
PostThreadMessageA
TranslateAcceleratorA
gdi32
CreateCompatibleBitmap
GetDIBits
GetDeviceCaps
GetObjectA
shell32
ExtractIconA
ole32
CoUninitialize
CoInitialize
CoCreateInstance
oleaut32
VariantClear
VariantInit
atl
ord57
ord21
ord16
ord23
ord17
ord20
ord18
wininet
InternetOpenW
InternetCloseHandle
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 329KB - Virtual size: 717KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.imuls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.erd Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ