Static task
static1
Behavioral task
behavioral1
Sample
6f4f0214a5c374ce1fe08f22739063c0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6f4f0214a5c374ce1fe08f22739063c0.exe
Resource
win10v2004-20231215-en
General
-
Target
6f4f0214a5c374ce1fe08f22739063c0
-
Size
143KB
-
MD5
6f4f0214a5c374ce1fe08f22739063c0
-
SHA1
0f3be6c9a03e619e09425ac818c828952e0927db
-
SHA256
8f79cfafa8c9862423f8a1d167f9bc4b3a4c12a388e9b60bf8de58c76b7c5e5f
-
SHA512
1e7b21647a1b7f542fc21450aa46c396a2be6ff7d1b47c87a79fdf4eab79e382e7b6526508ba6667052fb990613522074ce3adae570c6a695e13acf6aaef0d94
-
SSDEEP
3072:Vk1iVptyGk86Ppvg4u2vKJJOiF6p8Yaf+0AGvpe5t8MfOzMuhuEqqXZTh0C8I:Vk1Yptj6P+4jKJOaf+Qx+vfchuEqqJC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f4f0214a5c374ce1fe08f22739063c0
Files
-
6f4f0214a5c374ce1fe08f22739063c0.exe windows:4 windows x86 arch:x86
902f4691c2d6565b935e896e44f28b44
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMenuState
GetParent
IsIconic
UpdateWindow
GetMenuCheckMarkDimensions
InvalidateRgn
EndDialog
LoadBitmapW
GetSystemMetrics
GetKeyState
CreateDialogIndirectParamW
GetDlgItem
PostQuitMessage
GetClientRect
SetWindowPos
CreateWindowExW
EnableWindow
GetWindow
GetActiveWindow
MessageBeep
SetMenuItemBitmaps
GetFocus
GetDesktopWindow
EnableMenuItem
SetTimer
IsWindowEnabled
DispatchMessageW
GetCursorPos
IsWindowVisible
ModifyMenuW
IsWindow
SetWindowContextHelpId
GetWindowLongW
PostMessageW
GetNextDlgTabItem
ValidateRect
DrawIcon
CheckMenuItem
SetMenu
MapDialogRect
GetSysColorBrush
GetNextDlgGroupItem
PeekMessageW
DestroyWindow
SetActiveWindow
TranslateMessage
kernel32
FreeLibrary
ReleaseMutex
LoadResource
SizeofResource
GetModuleHandleW
FreeEnvironmentStringsA
GetLastError
CreateMutexW
lstrlenW
GlobalAlloc
GetModuleFileNameW
EnumResourceLanguagesA
CloseHandle
GetProcAddress
SetCurrentDirectoryW
LockResource
ExitProcess
WaitForSingleObject
CreateProcessW
FindResourceW
LoadLibraryW
MultiByteToWideChar
InterlockedExchange
CompareStringA
comctl32
InitCommonControlsEx
oleacc
LresultFromObject
CreateStdAccessibleObject
oledlg
OleUIBusyW
Sections
.text Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ