Static task
static1
Behavioral task
behavioral1
Sample
06022fc64c04e451f5f3d6f5281b22f8.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
06022fc64c04e451f5f3d6f5281b22f8.exe
Resource
win10v2004-20231215-en
General
-
Target
06022fc64c04e451f5f3d6f5281b22f8
-
Size
572KB
-
MD5
06022fc64c04e451f5f3d6f5281b22f8
-
SHA1
c02e7c28bc610ca530adfab26eb92d3a175db676
-
SHA256
26e105cb1aeec2fe3025c43139d88a1019c18b6b63d329294a3936eb6e6b1b84
-
SHA512
1c8eeb0bc9b60ec87c1f3cb9f14f448ecd2685d114076aedbc5d48c524ad628e1c9b18d34c386921408e66e7838bb4bd31fcb897b2d84051aa4e71c0c827c7d2
-
SSDEEP
12288:NOAnmx38hcUwELupsk7SQGnJTPlH8OeGKY1Fm2wS:46hcUwrpsk7voTP1p+Y1s7S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06022fc64c04e451f5f3d6f5281b22f8
Files
-
06022fc64c04e451f5f3d6f5281b22f8.exe windows:4 windows x86 arch:x86
bf4e56c626e175c96084ce0dbb91be0c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExA
ShowWindow
ShowScrollBar
GetClipboardSequenceNumber
GetMonitorInfoW
BringWindowToTop
RegisterClassExA
GetWindowTextW
MessageBoxA
EnumDisplaySettingsExW
SetForegroundWindow
EnumWindows
GetClipboardViewer
FrameRect
IsCharUpperA
SetDlgItemInt
GetClientRect
GetWindowPlacement
GetWindowTextLengthA
DdeAbandonTransaction
MessageBoxExW
EnumDisplayDevicesW
SetCaretPos
BroadcastSystemMessageW
OemToCharBuffA
GetSystemMenu
SetCursorPos
SetFocus
DestroyWindow
CreateWindowStationA
LoadCursorFromFileW
EndDialog
SendInput
ToAscii
MsgWaitForMultipleObjects
EnumWindowStationsA
SetMenuItemBitmaps
RegisterClassA
GetKeyboardLayoutList
CharLowerBuffA
GetClassInfoExA
DdeKeepStringHandle
LoadCursorFromFileA
DefWindowProcA
GetPropW
shell32
RealShellExecuteExW
ShellExecuteW
ShellExecuteExW
kernel32
CreateFileA
SetHandleCount
IsValidLocale
GetCurrentThreadId
RtlUnwind
SetConsoleOutputCP
FlushViewOfFile
CompareStringW
FileTimeToDosDateTime
GetStartupInfoA
MultiByteToWideChar
EnumCalendarInfoW
HeapCreate
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetConsoleScreenBufferInfo
GetTimeZoneInformation
FlushConsoleInputBuffer
GetEnvironmentStrings
FreeEnvironmentStringsW
TerminateProcess
WideCharToMultiByte
VirtualFree
CloseHandle
WritePrivateProfileStructW
GetCPInfo
InterlockedDecrement
GetCommandLineA
ReadFile
ExitProcess
GetThreadPriority
GetProcessHeap
GetVersionExA
GetProfileStringA
DosDateTimeToFileTime
GetDateFormatA
CreateProcessW
SetFileAttributesW
lstrcpyW
HeapSize
RtlZeroMemory
GetUserDefaultLCID
GetStringTypeA
CreatePipe
LCMapStringA
GlobalDeleteAtom
VirtualProtectEx
FindResourceA
GetDiskFreeSpaceW
FreeEnvironmentStringsA
ExpandEnvironmentStringsA
OpenMutexA
FreeLibrary
WaitNamedPipeW
GetACP
EnumDateFormatsExA
WaitForSingleObjectEx
GetNumberFormatW
SetEnvironmentVariableW
WriteProfileSectionA
WriteConsoleOutputAttribute
InterlockedExchange
GetProcessAffinityMask
GlobalAlloc
InitializeCriticalSection
WriteConsoleA
TlsAlloc
FileTimeToLocalFileTime
GetCurrencyFormatW
CompareStringA
GetTimeFormatA
WriteFile
SystemTimeToFileTime
LoadLibraryW
HeapReAlloc
WriteConsoleW
GetOEMCP
FillConsoleOutputCharacterA
WaitForSingleObject
GetModuleFileNameA
GetStringTypeW
QueryPerformanceCounter
GetPrivateProfileSectionNamesW
OpenWaitableTimerA
LeaveCriticalSection
SetConsoleCtrlHandler
GetComputerNameW
GetCurrentProcess
IsDebuggerPresent
HeapFree
GetSystemTimeAsFileTime
InterlockedIncrement
VirtualUnlock
GetConsoleCP
GetFileSize
GetStringTypeExA
FindResourceExA
GetStartupInfoW
CreateMailslotW
DebugActiveProcess
SetLastError
lstrcpyn
SetWaitableTimer
GetLocaleInfoA
GetCurrentThread
CreateDirectoryExW
GetTickCount
LCMapStringW
lstrcmpiA
EnterCriticalSection
HeapDestroy
EnumSystemLocalesA
GetLastError
OutputDebugStringA
DeleteCriticalSection
GetModuleHandleA
TlsSetValue
TlsGetValue
GetCurrentProcessId
SetStdHandle
VirtualQuery
VirtualQueryEx
GetStdHandle
SetEnvironmentVariableA
TlsFree
GetFileType
OutputDebugStringW
GetLocaleInfoW
VirtualAlloc
Sleep
LocalLock
IsValidCodePage
OpenEventA
HeapAlloc
CreateMutexA
UnlockFileEx
UnhandledExceptionFilter
GetConsoleOutputCP
FlushFileBuffers
LoadLibraryA
GetProcAddress
LoadLibraryExA
SetFilePointer
CreateSemaphoreW
lstrlen
GetConsoleMode
gdi32
CreateDCA
CreatePolygonRgn
GetTextFaceW
SetAbortProc
BeginPath
GetDeviceCaps
GetMetaRgn
SetLayout
DeleteDC
GetBitmapBits
GetTextFaceA
GetDCOrgEx
PathToRegion
GetObjectA
SetPolyFillMode
DeleteObject
UpdateICMRegKeyA
comctl32
CreateToolbarEx
InitCommonControlsEx
ImageList_Draw
CreatePropertySheetPageW
ImageList_ReplaceIcon
ImageList_Replace
ImageList_Write
ImageList_GetImageCount
ImageList_Duplicate
ImageList_SetBkColor
ImageList_AddMasked
CreatePropertySheetPageA
ImageList_AddIcon
ImageList_EndDrag
wininet
GopherCreateLocatorA
InternetGoOnlineW
GetUrlCacheEntryInfoA
InternetTimeToSystemTimeW
InternetReadFileExW
InternetGetCertByURLA
Sections
.text Size: 176KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 254KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ