Static task
static1
Behavioral task
behavioral1
Sample
06fe07dee24fd457387de862b293d753.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
06fe07dee24fd457387de862b293d753.exe
Resource
win10v2004-20231222-en
General
-
Target
06fe07dee24fd457387de862b293d753
-
Size
52KB
-
MD5
06fe07dee24fd457387de862b293d753
-
SHA1
074776a00b075855935edca5b76ffff7770c530c
-
SHA256
982a4a3b08ea6196a8ddaaa904feacb3376be1dc407c28710629ad708542e2aa
-
SHA512
9406c579c03f9a634019a29fa8292552397f26fcb1bd95fb2d71dbb51b13c7cbec2a0435449866debf6650f43a1131cef99636a6ed474e6981f047d424ad2618
-
SSDEEP
768:pmXkMlpS8dKprloEv00QObcbRnT6h1PY6:YXbSAKnocQO2GM6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06fe07dee24fd457387de862b293d753
Files
-
06fe07dee24fd457387de862b293d753.exe windows:4 windows x86 arch:x86
8f20a9fc4baf8737315c2442d2c8dadf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetVolumeInformationA
CreateThread
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
ExitProcess
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
CreateDirectoryA
CreateFileA
WriteFile
CloseHandle
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStringTypeW
RtlUnwind
WinExec
HeapAlloc
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
user32
CopyRect
IsChild
IsWindowVisible
SendMessageA
EnableWindow
SetWindowTextA
MessageBoxA
DialogBoxParamA
GetParent
GetDesktopWindow
GetWindowRect
GetDlgItem
OffsetRect
SetWindowPos
wsprintfA
advapi32
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
wsock32
sendto
connect
socket
WSAStartup
ioctlsocket
recvfrom
htons
comctl32
InitCommonControlsEx
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ