Static task
static1
Behavioral task
behavioral1
Sample
1c6cb09109653b0568797d33178c60c2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1c6cb09109653b0568797d33178c60c2.exe
Resource
win10v2004-20231222-en
General
-
Target
1c6cb09109653b0568797d33178c60c2
-
Size
63KB
-
MD5
1c6cb09109653b0568797d33178c60c2
-
SHA1
5c6a0d9ec753ffc07682986efae300adbfa4ce9b
-
SHA256
4fbfa13faff3fb06acae81088ced1683b87accbba82c676ffdb7f146d1f9f020
-
SHA512
933cbc5ab2ad19f4d3856c4be521eac6371b5e83e7c3234cc84a0ab19f5487fbf80105d99f35fba0fa44f56ce044746a3e4cd204815a58cd1d08243bf0dc95c2
-
SSDEEP
768:qDjY+GE3jjp4VjnDitRIkZJqj6+J3nQ8ieAX8wFNFE2R33d/qglYCFLzGm7:qDhNIZj5xlp2DFdyqN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c6cb09109653b0568797d33178c60c2
Files
-
1c6cb09109653b0568797d33178c60c2.exe windows:4 windows x86 arch:x86
cbe63c82a2989ee718be7eff9c0e8c09
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexA
lstrlenW
SetLastError
GlobalUnlock
Sleep
GetModuleHandleA
PulseEvent
SetEnvironmentVariableA
ReleaseMutex
GetStdHandle
CloseHandle
TlsGetValue
HeapCreate
FindResourceA
GetCurrentThreadId
LoadLibraryExW
CreateFileA
GetConsoleMode
TerminateThread
LocalFree
user32
GetIconInfo
DrawEdge
GetDlgItem
CallWindowProcA
DrawMenuBar
CopyRect
IsWindow
FillRect
GetClipCursor
CheckRadioButton
SetFocus
GetDC
DispatchMessageA
apphelp
ApphelpCheckIME
SdbCloseDatabase
SdbFindFirstTag
SdbFindNextTag
SdbGetDatabaseID
clbcatq
ComPlusMigrate
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jrdxkyw Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE