Static task
static1
Behavioral task
behavioral1
Sample
6e37acf90f41d790623f2069078c7ddb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6e37acf90f41d790623f2069078c7ddb.exe
Resource
win10v2004-20231222-en
General
-
Target
6e37acf90f41d790623f2069078c7ddb
-
Size
656KB
-
MD5
6e37acf90f41d790623f2069078c7ddb
-
SHA1
f8757d2a59dda0aaa168cba9253fb8f7a235ee74
-
SHA256
e626d9d09a2b662d4e6197bf09061fd1b701ff941ccfe3c0183fbe7b1e496f08
-
SHA512
07f0424ba2a7fb2afd430756f1f3b886eee79caf646cd8b6e6192f4d13bd66ff9c7954ee4023f060479a8030ede6a949f8ac52c14cd374c39bbd615a91994a6b
-
SSDEEP
6144:81GqzRupI4HMKF6gtEqPu5jWyFWhjh/fgpQSY3ihdQSNaPM4loo5Zf:8HRupXRUqPu5jWyFWhjEY3i8SIh95B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e37acf90f41d790623f2069078c7ddb
Files
-
6e37acf90f41d790623f2069078c7ddb.exe windows:5 windows x86 arch:x86
f0d4d888365525da27840d92b16e9939
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
_acmdln
__set_app_type
_controlfp
_except_handler3
exit
_XcptFilter
_cexit
_exit
__p__fmode
_c_exit
kernel32
GetModuleHandleA
GetStartupInfoA
hypertrm
MessageLoop
InitInstance
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ