Static task
static1
Behavioral task
behavioral1
Sample
6fbc979fac89d10a30d96847e6aeecfa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6fbc979fac89d10a30d96847e6aeecfa.exe
Resource
win10v2004-20231222-en
General
-
Target
6fbc979fac89d10a30d96847e6aeecfa
-
Size
43KB
-
MD5
6fbc979fac89d10a30d96847e6aeecfa
-
SHA1
ae6ffcdde795bdeb5cbc0e8d92e29c22ae5f313f
-
SHA256
66917fde7d1b93fb1283838e63aa522a1028bb13107b54e65a705ea0fbfcbca4
-
SHA512
67b7bd4b1aabb1c0d071c4d6e770cd447b7c0b3a7a9ea704f05f6b4d90d1a4fae5d5e051f18b3a57c4dee2a09417aa3ef83bf5e432464e2b6f353fb998b9dfd2
-
SSDEEP
768:uZNu8/7gteP3yD6xn8ZGI6maG9LXAEFYAWBm2u/6oR0pKXCgKh/:l8OePC+x8ZGI6maG9LjvWs/MKyHN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fbc979fac89d10a30d96847e6aeecfa
Files
-
6fbc979fac89d10a30d96847e6aeecfa.exe windows:4 windows x86 arch:x86
b95df415950739056476af9062e5e0d6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryExA
EnumCalendarInfoW
ExitProcess
FindAtomA
GetCurrencyFormatA
GetCurrentDirectoryW
GetEnvironmentVariableA
GetFileAttributesExA
GetNamedPipeHandleStateW
GetProcessTimes
GlobalGetAtomNameW
GlobalWire
SetConsoleCursorPosition
SetConsoleTitleW
SetHandleInformation
SetLastError
SetNamedPipeHandleState
SuspendThread
Thread32First
lstrcmpi
user32
AlignRects
AnyPopup
ArrangeIconicWindows
CharToOemW
CopyAcceleratorTableW
CopyIcon
CreateDesktopA
DdeQueryStringW
DdeSetUserHandle
DlgDirSelectComboBoxExA
DrawFrame
EnableWindow
EnumDesktopWindows
GetComboBoxInfo
GetMenuBarInfo
GetMenuItemID
GetMessageA
GetShellWindow
IMPGetIMEA
MapVirtualKeyExW
MessageBoxExA
OpenClipboard
SetDoubleClickTime
SetInternalWindowPos
SetRectEmpty
wsprintfW
gdi32
AngleArc
BeginPath
ColorMatchToTarget
CreateICW
DeleteDC
EnumFontsA
FillRgn
GetAspectRatioFilterEx
GetBkColor
GetCharABCWidthsFloatW
GetDeviceCaps
GetEnhMetaFileA
GetFontLanguageInfo
GetOutlineTextMetricsA
GetSystemPaletteEntries
GetViewportOrgEx
MoveToEx
ScaleViewportExtEx
SetMetaRgn
SetTextAlign
Sections
.text Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 42KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ