Static task
static1
Behavioral task
behavioral1
Sample
6b2a8c958deeb1cdce76e8e95f33553484bcdadeb568fd53bab59e7a65d0dfdb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6b2a8c958deeb1cdce76e8e95f33553484bcdadeb568fd53bab59e7a65d0dfdb.exe
Resource
win10v2004-20231222-en
General
-
Target
6b2a8c958deeb1cdce76e8e95f33553484bcdadeb568fd53bab59e7a65d0dfdb
-
Size
1.0MB
-
MD5
520bb2f7bf461b555c1d6a5bbc1da8f5
-
SHA1
8c9171029fb74eab9edc61d8fd89b85efc5757f2
-
SHA256
6b2a8c958deeb1cdce76e8e95f33553484bcdadeb568fd53bab59e7a65d0dfdb
-
SHA512
d77123dc02f5921e9c54e8e0adb0865a3d8c295725ea7ca14bbf3aa0e08ce4c282b94916d76d27e1e145515aad8fe7a322351422ac96979088e9e402fcb7329d
-
SSDEEP
24576:kJYEpn2WK3tTc3uNFdNDQHCXFFg2031mCQ6Voqc5PJXsZ9:+V2ba3mPo6DZy+RXs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b2a8c958deeb1cdce76e8e95f33553484bcdadeb568fd53bab59e7a65d0dfdb
Files
-
6b2a8c958deeb1cdce76e8e95f33553484bcdadeb568fd53bab59e7a65d0dfdb.exe windows:5 windows x64 arch:x64
d8cd6f0cd66697359457698133ea95ca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
GetAce
comctl32
ImageList_Remove
comdlg32
GetOpenFileNameW
gdi32
LineTo
iphlpapi
IcmpSendEcho
mpr
WNetUseConnectionW
ole32
CoGetObject
oleaut32
UnRegisterTypeLi
psapi
GetProcessMemoryInfo
shell32
DragFinish
user32
GetDC
userenv
LoadUserProfileW
uxtheme
IsThemeActive
version
VerQueryValueW
wininet
FtpOpenFileW
winmm
timeGetTime
wsock32
WSACleanup
Sections
.MPRESS1 Size: 963KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE