Static task
static1
Behavioral task
behavioral1
Sample
06d1770309529431d96316e7b3454d10.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
06d1770309529431d96316e7b3454d10.exe
Resource
win10v2004-20231215-en
General
-
Target
06d1770309529431d96316e7b3454d10
-
Size
87KB
-
MD5
06d1770309529431d96316e7b3454d10
-
SHA1
5110a24309131009efef207a2d3f31108a309520
-
SHA256
a76a2309baec0da411a4d11b19c4a9989758714b5c70770f09c5931a59189dfd
-
SHA512
7652d50a3f264eac52a81ae40e32b9ac79c0a007e4b5d31b51f42f5d9983db658dda8232817f0a47d2eb292ca05507af2303c480d2087028f3c7cebb03878bad
-
SSDEEP
1536:L+A2rc8bSumpk6OFrxYorgqbjfxl7x6ApTx7Smtiq2YgDYH:h2ZbDb6OfRgqP3x6M7V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06d1770309529431d96316e7b3454d10
Files
-
06d1770309529431d96316e7b3454d10.exe windows:4 windows x86 arch:x86
b9a20175da9af1321cb8ab92c4056479
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
PulseEvent
TlsFree
AreFileApisANSI
TlsGetValue
GetUserDefaultLangID
IsDBCSLeadByte
GetModuleHandleA
GetProcessVersion
lstrcatA
EnumCalendarInfoA
GetConsoleInputWaitHandle
GetOEMCP
GetThreadLocale
ResetEvent
OutputDebugStringA
GetExitCodeThread
VirtualAlloc
GetProcessTimes
GetNumberOfConsoleMouseButtons
GetConsoleCP
user32
ValidateRect
GetDC
RegisterClassA
InvalidateRect
GetActiveWindow
GetClassNameA
ShowWindow
GetWindowTextLengthA
ReleaseDC
ReleaseDC
GetForegroundWindow
IsWindowVisible
GetWindow
GetClassInfoExA
IsIconic
GetFocus
CloseWindow
GetSystemMetrics
GetWindowTextA
tapi32
MMCShutdown
MMCSetServerConfig
MMCSetPhoneInfo
MMCInitialize
MMCSetLineInfo
mlang
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE