Static task
static1
Behavioral task
behavioral1
Sample
6566323daf6bd06ad0153f09449716e9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6566323daf6bd06ad0153f09449716e9.exe
Resource
win10v2004-20231222-en
General
-
Target
6566323daf6bd06ad0153f09449716e9
-
Size
32KB
-
MD5
6566323daf6bd06ad0153f09449716e9
-
SHA1
0f74b789c2e6f1c02d7370c16e5388073701f6c5
-
SHA256
7bfe1c714eac5f7104ca6ca2edcc10ecf58342f26d4a86b4c668ea071d1e835e
-
SHA512
65fc7f1809a09a560a959cdffe35f75cad9f84fbbed1e633731e0f5a09b3799eb2ce7a9656d1054bbf504fd49e54b160d82629baf222d9327499007d3b34b7da
-
SSDEEP
768:wuzvuFTRX+SxoZR0+OHuD5FAP5jBHhXb0omMa1B/XN:wuzvuFTRXirxOsFABdFda1B/d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6566323daf6bd06ad0153f09449716e9
Files
-
6566323daf6bd06ad0153f09449716e9.exe windows:4 windows x86 arch:x86
c123427cce08e41c617c81d28909daed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsProcessorFeaturePresent
TerminateThread
SetupComm
GetCurrentThread
GetCurrentProcessId
GetDateFormatA
SleepEx
GetSystemWindowsDirectoryA
GetTimeFormatA
UnlockFile
GetConsoleHardwareState
PeekConsoleInputW
QueueUserWorkItem
TlsAlloc
RtlUnwind
OpenFile
QueryDosDeviceA
GetEnvironmentStringsW
GlobalUnfix
SetLastError
EnumTimeFormatsW
Heap32Next
GetCurrentDirectoryA
SwitchToThread
EnumCalendarInfoExW
RegisterWaitForSingleObjectEx
SetConsoleOutputCP
SetVDMCurrentDirectories
GetConsoleAliasExesA
EraseTape
BackupSeek
FindFirstVolumeW
GetProfileStringA
InitializeCriticalSectionAndSpinCount
SetFileApisToANSI
Module32NextW
GetComputerNameW
SetConsoleIcon
GetVersion
ReadConsoleW
GetNamedPipeHandleStateA
OpenSemaphoreW
GetConsoleInputExeNameW
GetPriorityClass
GetConsoleDisplayMode
AddAtomA
GetCPInfo
SetConsoleTitleW
GetModuleFileNameA
VirtualProtect
LocalUnlock
GetTempFileNameA
GetAtomNameW
InterlockedExchangeAdd
SetPriorityClass
GetACP
CreateThread
GetCurrentDirectoryW
FlushConsoleInputBuffer
GetAtomNameA
EnumSystemCodePagesW
SetCurrentDirectoryW
GetCompressedFileSizeA
GetWindowsDirectoryW
CancelWaitableTimer
FillConsoleOutputCharacterW
MapUserPhysicalPagesScatter
GetProcessAffinityMask
lstrcpynA
FreeVirtualBuffer
GetLogicalDriveStringsA
GetConsoleFontSize
EnumResourceNamesA
GlobalFindAtomW
SetEnvironmentVariableW
TerminateProcess
SetEvent
lstrcpyn
SetSystemTimeAdjustment
HeapSize
VerifyVersionInfoW
ConvertThreadToFiber
GetPrivateProfileStructW
WriteProfileSectionA
EnumUILanguagesA
SetLocalTime
GetConsoleWindow
LocalReAlloc
lstrcmp
GetStringTypeExA
GetStringTypeA
FindResourceExA
CreateDirectoryExW
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ