Static task
static1
Behavioral task
behavioral1
Sample
6d47b57641c1a77dfee5936f57acd3a5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6d47b57641c1a77dfee5936f57acd3a5.exe
Resource
win10v2004-20231215-en
General
-
Target
6d47b57641c1a77dfee5936f57acd3a5
-
Size
192KB
-
MD5
6d47b57641c1a77dfee5936f57acd3a5
-
SHA1
0b18c34470f2bf4a842682d6ed4b8842e275b89f
-
SHA256
85057d4de7a020aa015e2ffec53288027ce475e3df426e462bb7beffbab91ca6
-
SHA512
d593236dcab8d2e38c20c05621f12374ec7033108778f687a46204630bf92ebccd320d8cab27cbb1dab8c281ff5b675f14500345289178a5f7bb2182d0d6d485
-
SSDEEP
3072:JpLBJINfkw8GlYsWJYmi1uUF0HprVtWKBMR7PlPB2:JZ812WOph/MRT58
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6d47b57641c1a77dfee5936f57acd3a5
Files
-
6d47b57641c1a77dfee5936f57acd3a5.exe windows:4 windows x86 arch:x86
c6ed746a09c3983374f10f4b5a768d79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
recv
gethostname
comctl32
ord14
kernel32
CompareStringA
CompareStringW
TlsGetValue
GetProcAddress
LoadLibraryA
GetTickCount
ExitProcess
GetLastError
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsAlloc
SetLastError
GetCurrentThread
TlsFree
TlsSetValue
SetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
InterlockedExchange
VirtualQuery
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
IsBadWritePtr
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
VirtualProtect
GetSystemInfo
GetTimeZoneInformation
GetLocaleInfoW
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ