Static task
static1
Behavioral task
behavioral1
Sample
6fd1899a857db1cf396d90b6043a4e6d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6fd1899a857db1cf396d90b6043a4e6d.exe
Resource
win10v2004-20231222-en
General
-
Target
6fd1899a857db1cf396d90b6043a4e6d
-
Size
277KB
-
MD5
6fd1899a857db1cf396d90b6043a4e6d
-
SHA1
64c52ff6c9b80562475d23cff8648d353437ad92
-
SHA256
64c66a6af1fbac3471e169f839b47c7cc17364068424a4b7ff18dd942dbfd8fd
-
SHA512
9a409d2de2d0de5d28416d4808040edaca750f87e590dc9bc86eee6b63e967f5278eb8dbecce8eb8798e9800cb4e49da9f488e95b5b2d54561192c6cd65b6eb8
-
SSDEEP
3072:CdX0OLUuPuAGS0ssEx5m/okUbZQLpXKSbbRqu+dEQErIA:0wqrassExI3lKS8ELrI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fd1899a857db1cf396d90b6043a4e6d
Files
-
6fd1899a857db1cf396d90b6043a4e6d.exe windows:4 windows x86 arch:x86
21bc39db63f235414f41db51007d6523
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventW
CreateFileA
CreateMutexA
CreateProcessA
ExpandEnvironmentStringsA
FreeLibrary
GetFileSize
GetThreadLocale
LoadLibraryW
ResetEvent
lstrcmpiW
user32
BeginPaint
CreatePopupMenu
EndPaint
GetClientRect
GetDC
IsIconic
KillTimer
MessageBoxA
SetTimer
SetWindowLongA
ShowWindow
TrackPopupMenu
TranslateMessage
gdi32
CreateBitmap
ExtTextOutW
SelectObject
SetROP2
SetStretchBltMode
SetWindowOrgEx
TextOutA
shell32
DragQueryFileA
ExtractIconA
SHFileOperationA
ShellExecuteA
ShellExecuteExW
comctl32
CreatePropertySheetPageA
CreateToolbarEx
ImageList_DragEnter
ImageList_GetImageCount
ImageList_SetDragCursorImage
ImageList_SetOverlayImage
ImageList_Write
PropertySheetW
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE