Static task
static1
Behavioral task
behavioral1
Sample
1006c17602e1192d85f9b7f3379a90f9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1006c17602e1192d85f9b7f3379a90f9.exe
Resource
win10v2004-20231215-en
General
-
Target
1006c17602e1192d85f9b7f3379a90f9
-
Size
224KB
-
MD5
1006c17602e1192d85f9b7f3379a90f9
-
SHA1
a1ceea85cde021e0005c1079ddebf45a1c004b83
-
SHA256
c35657ba3cfa9449c008c489aede45ada2cfe300466d04857fe300683b31851c
-
SHA512
77221648b09541c33c0b98b6e41e46d93ffc533ccb8c31932d7dc97eec700c7c2ae7515a39eb2981ce8ef7f7aa60a49c3776ce0223607a5ef051b2ef9b9c12e4
-
SSDEEP
6144:2PSc8Mjl6yECUxoITxmndtbsvYFYcJd193acooOAK9yH8h:2PSc8cl3EC7MxmndtsgYW9Ayc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1006c17602e1192d85f9b7f3379a90f9
Files
-
1006c17602e1192d85f9b7f3379a90f9.exe windows:4 windows x86 arch:x86
6a51957de9b0e4168e6d95ca20a780a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
comdlg32
FindTextA
GetSaveFileNameA
GetOpenFileNameA
kernel32
LoadLibraryExA
GetACP
GetProcAddress
GetCommandLineA
VirtualAlloc
lstrlenA
ExitThread
GetLastError
LoadLibraryA
IsBadHugeReadPtr
LocalAlloc
GetCommandLineW
GetModuleHandleA
comctl32
ImageList_Add
ImageList_Remove
ImageList_Create
ImageList_DrawEx
ImageList_Write
ImageList_Draw
ImageList_Read
ImageList_Destroy
ImageList_DragShowNolock
ImageList_GetBkColor
gdi32
CreateCompatibleDC
Sections
CODE Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 151KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES2 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES7 Size: 1024B - Virtual size: 616B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES3 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES9 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES6 Size: 512B - Virtual size: 466B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES1 Size: 512B - Virtual size: 213B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES8 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ