Static task
static1
Behavioral task
behavioral1
Sample
6fa7bb05865a2d66b3316e7279e245ec.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6fa7bb05865a2d66b3316e7279e245ec.exe
Resource
win10v2004-20231215-en
General
-
Target
6fa7bb05865a2d66b3316e7279e245ec
-
Size
42KB
-
MD5
6fa7bb05865a2d66b3316e7279e245ec
-
SHA1
18a2cc7739518a1402567b1dc31ee2623f9b474a
-
SHA256
7dfdaf39df5d3fa219ce9f2b88e294357bcdf1fafe57ae674def09f0e20691bd
-
SHA512
44e28e4fdf8dbd181a2a14511627d7ec92e775687b4b8ad2d41b580e52d5177198c85b34daef9e7ceebdd83f5edbbd58a6f86c556a78c46967ef57f768fbc00f
-
SSDEEP
768:L+1rvyjsX6IGS6P8bQ0wLuB2s39BZIjEkApM3bhtNKKjSKgkNGy2Nr:LI3X6ImGQ04sZIjNAa3bEKjSKLNnCr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fa7bb05865a2d66b3316e7279e245ec
Files
-
6fa7bb05865a2d66b3316e7279e245ec.exe windows:4 windows x86 arch:x86
8c5dce780ef82a6039627647be91c6ba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_beginthread
_chdir
exit
user32
IsDlgButtonChecked
GetParent
EndDialog
GetDC
SetFocus
SetWindowLongW
UnregisterClassW
BeginPaint
DrawFocusRect
GetWindowLongW
SetWindowPos
CheckDlgButton
ReleaseDC
DeferWindowPos
LoadCursorW
GetDlgCtrlID
SendMessageW
GetSysColor
SetRect
BeginDeferWindowPos
RedrawWindow
DialogBoxParamW
RegisterClassW
DefWindowProcW
GetDlgItem
GetSystemMetrics
CreateWindowExW
EndPaint
EndDeferWindowPos
GetClientRect
activeds
FreeADsMem
gdi32
DeleteObject
SetROP2
GetStockObject
TranslateCharsetInfo
CreateFontIndirectW
SetBkColor
GetTextMetricsW
CreatePen
SelectObject
SetTextAlign
SetTextColor
ExtTextOutW
GetDeviceCaps
Polyline
kernel32
VirtualAlloc
GetModuleHandleA
FreeLibrary
GetTickCount
SetUnhandledExceptionFilter
GetCurrentProcess
MulDiv
GetProcAddress
lstrlenW
LocalReAlloc
LocalFree
GetCurrentProcessId
GetACP
QueryPerformanceCounter
GetCurrentThreadId
avifil32
AVIFileOpen
Sections
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.textbss Size: - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE