Static task
static1
Behavioral task
behavioral1
Sample
6e1d9b7ee47e2db2adf256d3973d5ec5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6e1d9b7ee47e2db2adf256d3973d5ec5.exe
Resource
win10v2004-20231215-en
General
-
Target
6e1d9b7ee47e2db2adf256d3973d5ec5
-
Size
216KB
-
MD5
6e1d9b7ee47e2db2adf256d3973d5ec5
-
SHA1
b58c9dd787accfc15721af3c4a6b76f3d1f1161e
-
SHA256
19db5dde595d4881bfc86b8b2ba6f374d4db6b2a2b6f0b4aaa179b1396d0683f
-
SHA512
c3892d50010eb039a1e804ba4a9be6d7ad36ed276babc5f4a339ee1951c0e75c7e9b349898c117eade829e78db815c0aa1d042d59494a874a563573fa39386c2
-
SSDEEP
3072:mPKwXfd+hSv1H30CurjBSnK5IDy2qRwvSAAgNObQDOehWIdQzoJOU1rVAwM1:Ud+IX0dSnPDKEYg0bQDOPIOzo5ds
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e1d9b7ee47e2db2adf256d3973d5ec5
Files
-
6e1d9b7ee47e2db2adf256d3973d5ec5.exe windows:4 windows x86 arch:x86
b21e5dd4bacbc8fb56e357620901ce99
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
GetScrollPos
GetFocus
UpdateWindow
SetCapture
SetRect
DrawEdge
GetScrollRange
CreateMenu
CharUpperBuffA
GetForegroundWindow
ReleaseCapture
SetScrollRange
MessageBeep
InflateRect
KillTimer
CharLowerA
CreateWindowExA
InvalidateRect
DrawAnimatedRects
GetMenuItemInfoA
SendMessageW
SetScrollPos
AdjustWindowRectEx
PostQuitMessage
SetWindowPos
DestroyCursor
EnumChildWindows
SetActiveWindow
GetMessagePos
TrackPopupMenu
RemoveMenu
MessageBoxA
SetForegroundWindow
GetWindowTextA
ShowOwnedPopups
CharLowerBuffA
ShowScrollBar
TranslateMDISysAccel
GetMenuItemCount
CreateIcon
RegisterClassA
ShowWindow
DispatchMessageW
EqualRect
GetClientRect
RedrawWindow
CallNextHookEx
LoadBitmapA
DefWindowProcA
OpenClipboard
DefMDIChildProcA
CharNextW
InsertMenuItemA
GetSystemMetrics
SetClipboardData
SetWindowLongW
ScrollWindow
EmptyClipboard
FillRect
DrawFrameControl
CharNextA
CheckMenuItem
SetClassLongA
IsDialogMessageA
UnhookWindowsHookEx
GetLastActivePopup
FindWindowA
GetKeyboardLayout
MsgWaitForMultipleObjects
BeginPaint
ChildWindowFromPoint
RegisterClipboardFormatA
PtInRect
GetSubMenu
LoadKeyboardLayoutA
CallWindowProcA
GetMenuStringA
GetSysColor
SendMessageA
DrawMenuBar
GetClassNameA
IsWindowUnicode
PeekMessageW
SetCursor
ReleaseDC
CharToOemA
GetClassInfoA
SetScrollInfo
SetWindowTextA
LoadCursorA
DestroyWindow
DrawIconEx
FrameRect
SetWindowPlacement
GetCursorPos
OffsetRect
DrawIcon
EndPaint
GetWindow
GetWindowDC
GetWindowLongA
SetMenuItemInfoA
IntersectRect
MapVirtualKeyA
MapWindowPoints
wsprintfA
WindowFromPoint
GetPropA
CreatePopupMenu
PeekMessageA
GetScrollInfo
GetKeyState
CloseClipboard
GetClassLongA
OemToCharA
SetTimer
IsWindowVisible
GetWindowPlacement
GetKeyboardLayoutNameA
IsRectEmpty
ScreenToClient
msvcrt
wcstol
memmove
mbstowcs
sin
log
pow
wcscspn
kernel32
GetVersionExA
GetProcAddress
GetModuleHandleA
IsBadReadPtr
ExitProcess
VirtualAlloc
GetCommandLineA
GetACP
ExitThread
lstrlenW
LoadLibraryA
Sections
CODE Size: 176KB - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 953B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ