Static task
static1
Behavioral task
behavioral1
Sample
06a16bc1c66aa2f7b1ba0a155c6bda30.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
06a16bc1c66aa2f7b1ba0a155c6bda30.exe
Resource
win10v2004-20231215-en
General
-
Target
06a16bc1c66aa2f7b1ba0a155c6bda30
-
Size
197KB
-
MD5
06a16bc1c66aa2f7b1ba0a155c6bda30
-
SHA1
7e755b6e80f3ac3a13f796a7a5d1d41c9367034a
-
SHA256
443ff486b8b35916621b2eadf338d24a2baf266d1f72e8a2ad6724c997db283e
-
SHA512
0e2cdb5cf256fb57c49fa9c4c7cc8b8ecb95f02ae75b1661dc20c2c74de63bb5c209f056b07c25f130b4db5010722b1dc44a5297346f89c9328abf2e57a16b82
-
SSDEEP
3072:L8e8/1BO7EpF/rz6aAuC11S0VzlOaQlwDHw7pEbzPWn8e9nb6Y/1z1eHsp6U422X:L8e8ey/3Q11zz0ajMtEfHe9b7jm26U4b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06a16bc1c66aa2f7b1ba0a155c6bda30
Files
-
06a16bc1c66aa2f7b1ba0a155c6bda30.exe windows:4 windows x86 arch:x86
b93774c9c52c54bb0870e3c469f4d4a3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetTextColor
shell32
ShellExecuteExW
kernel32
SetTermsrvAppInstallMode
FindClose
FindFirstFileW
FindFirstFileExA
Sleep
GetFileAttributesExW
CreateThread
GetExitCodeThread
LeaveCriticalSection
EnterCriticalSection
ResumeThread
GetCurrentThreadId
GetSystemTimeAsFileTime
oleaut32
CreateErrorInfo
DispInvoke
VarI1FromDec
VariantInit
SysFreeString
Sections
.text Size: 116KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 708B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 123KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ