Static task
static1
Behavioral task
behavioral1
Sample
6eed0dab547809f26a139257b62e087e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6eed0dab547809f26a139257b62e087e.exe
Resource
win10v2004-20231222-en
General
-
Target
6eed0dab547809f26a139257b62e087e
-
Size
306KB
-
MD5
6eed0dab547809f26a139257b62e087e
-
SHA1
5eabaeffea620ed0fd3cf434fd459e105090afc7
-
SHA256
e1fe3db01c5d95fd1703374a626220cd00f57a477bb3c3d95bdd802df9d29d5e
-
SHA512
44718e7944d3b8adc3bf79e5696cdd6524520207be9fb0d8f1fa9b2455003b692dd22c525d8db34e82994f970b0ecaace32a006ef1ea8c7ef0870017e9467775
-
SSDEEP
6144:61nP6df8H6p7foQYxb3znsdieWuCbrahxHedkJP4ec8/X3Bu:GnPH6p77InsdRWz3aQkJAf8/X3Bu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6eed0dab547809f26a139257b62e087e
Files
-
6eed0dab547809f26a139257b62e087e.exe windows:4 windows x86 arch:x86
cfd4864e2e73b4519f2badc5cef080c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
GetTempPathA
ExitProcess
SetFilePointer
GetFileSize
GetModuleHandleA
GetCommandLineA
GetTickCount
GetDiskFreeSpaceA
ReadFile
WriteFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetWindowsDirectoryA
GetShortPathNameA
CreateDirectoryA
GetSystemDirectoryA
MultiByteToWideChar
RemoveDirectoryA
lstrcpyA
lstrcatA
MoveFileA
SetFileAttributesA
lstrlenA
GetFileAttributesA
CreateFileA
GetFileTime
CompareFileTime
CloseHandle
SetFileTime
CreateProcessA
WaitForSingleObject
LoadLibraryA
GetExitCodeProcess
SetEndOfFile
CreateThread
GlobalFree
GetModuleFileNameA
FindClose
GlobalAlloc
Sleep
lstrcmpiA
GetPrivateProfileStringA
FreeLibrary
FindNextFileA
FindFirstFileA
WritePrivateProfileStringA
DeleteFileA
GetProcAddress
user32
GetDlgItemTextA
SendDlgItemMessageA
LoadBitmapA
GetParent
SetClassLongA
IsWindowVisible
PeekMessageA
DispatchMessageA
FindWindowA
GetWindowRect
SetForegroundWindow
GetClientRect
SetRect
FillRect
ScreenToClient
GetDlgItem
EndPaint
LoadIconA
LoadCursorA
RegisterClassA
SystemParametersInfoA
GetDesktopWindow
CreateWindowExA
EnableWindow
SetFocus
EndDialog
IsWindowEnabled
DialogBoxParamA
SetTimer
SetWindowTextA
SetDlgItemTextA
CreateDialogParamA
DestroyWindow
ShowWindow
GetWindowTextA
SetWindowPos
DrawTextA
BeginPaint
MessageBoxA
DefWindowProcA
SendMessageA
wsprintfA
gdi32
SelectObject
SetTextColor
SetBkMode
CreateFontA
DeleteObject
CreateSolidBrush
LineTo
MoveToEx
CreatePen
BitBlt
CreateCompatibleDC
TextOutA
GetTextMetricsA
GetStockObject
SetBkColor
GetNearestColor
CreateBrushIndirect
advapi32
RegEnumKeyExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegOpenKeyA
RegDeleteValueA
RegCreateKeyA
shell32
ShellExecuteA
SHFileOperationA
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
ole32
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
comctl32
ord17
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ