Static task
static1
Behavioral task
behavioral1
Sample
6e0087593859744e373f6ae778f347b9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6e0087593859744e373f6ae778f347b9.exe
Resource
win10v2004-20231215-en
General
-
Target
6e0087593859744e373f6ae778f347b9
-
Size
548KB
-
MD5
6e0087593859744e373f6ae778f347b9
-
SHA1
3264215c5e52866cc0e890369680079e1441467a
-
SHA256
e25a670ef1680df9bdc260029943aa0d5ff2cb057ee8d35edfb5119510480a39
-
SHA512
8245fe9a1f181f9250dc70b78cb166a2bcab45857d5f006e52572bc19c6e42c50c7a132b78bdf447d04a0126890b2566c863a44f69c72c6a27e649e9d2d6d707
-
SSDEEP
12288:QqPYIkvaHjLqaoVxyg+aEZ31Sr56ZrKxxxWiegFp2t86XAIJ:Qq4aDWaobEaEar56ZGbVegFp2tuA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e0087593859744e373f6ae778f347b9
Files
-
6e0087593859744e373f6ae778f347b9.exe windows:4 windows x86 arch:x86
bae8880fb0c931cf1de816433b3f3f4c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
inproc
ord2
hook
ord4
winmm
timeGetTime
mfc42
ord3874
msvcrt
_CxxThrowException
kernel32
GlobalFree
GetModuleHandleA
GetProcAddress
VirtualProtect
user32
FrameRect
MessageBoxA
gdi32
PtVisible
advapi32
RegCloseKey
shell32
Shell_NotifyIconA
comctl32
ImageList_SetBkColor
ole32
CoInitialize
winio
ShutdownWinIo
bexception
ord1
msvcirt
??0exception@@QAE@ABQBD@Z
olepro32
ord251
Sections
.text Size: - Virtual size: 215KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 413KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.speed0 Size: - Virtual size: 303KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.speed1 Size: 528KB - Virtual size: 525KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ