Static task
static1
Behavioral task
behavioral1
Sample
6f2ec6fa6d75322aa8779eb1e9988fa5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6f2ec6fa6d75322aa8779eb1e9988fa5.exe
Resource
win10v2004-20231215-en
General
-
Target
6f2ec6fa6d75322aa8779eb1e9988fa5
-
Size
151KB
-
MD5
6f2ec6fa6d75322aa8779eb1e9988fa5
-
SHA1
e0466e1d7c30588df79798bad83f6b7ddfec35f8
-
SHA256
e242d24e89ff751752a1049a627071f449485d2c3589624600893c0a36db84a5
-
SHA512
1d5e46504b0ad48494bcd6ecf33257c6243e3376c9de6a86a49fd1accd296f613706500fabb88bb7a11f7c555fed89c615d08b3cb3417f8b721aee299466cf49
-
SSDEEP
3072:qNC4PEOAMeHqlqlClD9mH15uxn2gnUYDIlngbqbWcZgR:qLEOlUimClA+x2gTIlngb3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f2ec6fa6d75322aa8779eb1e9988fa5
Files
-
6f2ec6fa6d75322aa8779eb1e9988fa5.exe windows:4 windows x86 arch:x86
752c5a10aceabc50e3a3ee27894f9d27
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
GetModuleHandleW
ExitProcess
GetCurrentDirectoryA
VirtualAlloc
IsDebuggerPresent
GetCommandLineA
setupapi
SetupGetLineByIndexW
SetupGetLineTextW
CM_Reenumerate_DevNode_Ex
SetupCloseLog
SetupDiInstallDevice
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInterfaceDetailA
SetupDiOpenDevRegKey
SetupDiGetDriverInfoDetailW
SetupGetMultiSzFieldW
SetupDiGetDeviceInstallParamsW
pSetupStringFromGuid
SetupDiOpenClassRegKeyExW
SetupGetTargetPathW
SetupDiBuildDriverInfoList
SetupDiGetDeviceInterfaceAlias
SetupInstallFromInfSectionW
SetupInstallFilesFromInfSectionW
gdi32
GetGlyphOutlineW
StretchDIBits
GetTextExtentPoint32W
ExcludeClipRect
GetEnhMetaFileHeader
GetWindowOrgEx
ArcTo
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.textbs Size: 18KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 122KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 148KB - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ