Static task
static1
Behavioral task
behavioral1
Sample
6853375b7cec58c74abc7e8a698174f2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6853375b7cec58c74abc7e8a698174f2.exe
Resource
win10v2004-20231215-en
General
-
Target
6853375b7cec58c74abc7e8a698174f2
-
Size
637KB
-
MD5
6853375b7cec58c74abc7e8a698174f2
-
SHA1
ae10a1a1d5465e239cd4a760ebbf0fe96f79a2b5
-
SHA256
5d04a74ef3e6396c8e38f0d12069558acccf1342b166a4c0bacb9f751429ce85
-
SHA512
22358ba093dff9e90d9d6f27b0e74bcbd19b885a5bca5a8166a97c48dd3c2387b0d14965b27557f53ba50ccf78f9989b0b6fc7d56f8a47084ffe11e4ed0a364a
-
SSDEEP
12288:HYp+Ju0jthFyxDdeC3yjgtIKDZQx2TcDrksJvWLwqWeb:mQVNyp3sgAx2TXsJvWLnW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6853375b7cec58c74abc7e8a698174f2
Files
-
6853375b7cec58c74abc7e8a698174f2.exe windows:4 windows x86 arch:x86
54a9cbea3ba4ea789c4931ff65707a8f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
CompareFileTime
ResetEvent
GetConsoleCP
InterlockedExchange
GetProfileIntA
FindAtomA
LoadLibraryExA
lstrlenA
GetAtomNameA
WaitForSingleObject
CloseHandle
GetTickCount
GetVersion
VirtualProtect
HeapWalk
GetACP
HeapReAlloc
TlsFree
GlobalUnlock
GetModuleHandleA
user32
ModifyMenuA
GetKeyboardLayout
TranslateMessage
SubtractRect
LoadIconA
EnableScrollBar
DialogBoxParamA
GetScrollRange
UpdateWindow
SetWindowPos
GetWindowTextA
GetWindowLongA
GetDlgItem
InflateRect
InsertMenuA
SetPropA
DestroyMenu
EqualRect
CopyRect
DispatchMessageA
PostMessageA
GetMenu
MessageBoxA
ShowWindow
PostQuitMessage
PaintDesktop
GetMenuStringA
GetSubMenu
CreateCaret
msi
MsiGetMode
MsiCloseHandle
MsiDoActionA
MsiEnumProductsA
MsiEnumClientsA
uxtheme
GetThemeBool
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ