Static task
static1
Behavioral task
behavioral1
Sample
6fdebe5b0c0cc2d58d52a724802e512d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6fdebe5b0c0cc2d58d52a724802e512d.exe
Resource
win10v2004-20231222-en
General
-
Target
6fdebe5b0c0cc2d58d52a724802e512d
-
Size
357KB
-
MD5
6fdebe5b0c0cc2d58d52a724802e512d
-
SHA1
3d355b3b56b875ef82c8ad139942fe78959667e4
-
SHA256
6b55af48e9b0f276f507afbd7fab5a63343ff5fb8b26c32067f03f5bb84abd79
-
SHA512
5583e9fc9f87a1c2c6f9da8639ee33df0174d3b1ebbf8f173ac252dd4a27fc25f8d922d28bcd8ae009adff106b340eba8551f0f1d9319e01af9f4c3b649b1881
-
SSDEEP
6144:fyKWXnnntLhDfvQeVpZmjbx6MaNURgTeK1XKg5UWG7Cu/vyJKr6r1Ph25A:wJl3QeVuj5NRweK1X55UWG7dCJKrN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fdebe5b0c0cc2d58d52a724802e512d
Files
-
6fdebe5b0c0cc2d58d52a724802e512d.exe windows:4 windows x86 arch:x86
183d67ce2542fbee92851a9a93bab340
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
msvcrt
_snwprintf
memcpy
_adjust_fdiv
__p__commode
__setusermatherr
iswctype
_wtol
_c_exit
__dllonexit
__getmainargs
_unlock
wcstol
wcsncpy
__set_app_type
memmove
_fileno
fflush
localtime
_cexit
__p__fmode
_initterm
?terminate@@YAXXZ
time
exit
wcsncmp
__CxxFrameHandler
_exit
_controlfp
_XcptFilter
_acmdln
?what@exception@@UBEPBDXZ
memset
kernel32
GetVersionExA
SetUnhandledExceptionFilter
VirtualAlloc
EnterCriticalSection
InterlockedDecrement
GetSystemTime
GetLocalTime
SetFilePointer
SizeofResource
ReleaseMutex
LocalSize
GetDateFormatW
MapViewOfFile
CreateFileMappingW
lstrcatW
MoveFileW
UnhandledExceptionFilter
LoadLibraryW
HeapDestroy
ExpandEnvironmentStringsW
CreateEventW
OpenMutexA
GetTempFileNameA
WideCharToMultiByte
HeapSize
InterlockedCompareExchange
GetVersion
GetUserDefaultLCID
MulDiv
GetModuleHandleA
GlobalAlloc
GetFileSize
GetCommandLineW
IsDebuggerPresent
lstrcmpiW
GetProcessHeap
InterlockedIncrement
CompareStringW
HeapFree
GetConsoleOutputCP
GetCommandLineA
GetTimeFormatW
CreateThread
LoadResource
CreateEventA
GlobalUnlock
CreateFileA
GetShortPathNameA
LocalFree
InitializeCriticalSection
GetProcAddress
Sleep
GetTimeFormatA
LCMapStringA
QueryPerformanceFrequency
GetStringTypeW
LoadLibraryA
SetErrorMode
FindFirstFileW
WriteFile
DeleteCriticalSection
FoldStringW
GetOEMCP
FormatMessageW
GetFileType
FindResourceExW
DeleteFileW
GetDriveTypeA
CreateSemaphoreW
OutputDebugStringA
GetSystemTimeAsFileTime
GetFullPathNameW
ExitProcess
GetEnvironmentStringsW
GetCurrentThreadId
ReadFile
IsValidCodePage
HeapAlloc
GetWindowsDirectoryA
FreeLibrary
lstrcpyW
SetEndOfFile
GlobalFree
GetCurrentProcessId
LocalLock
GetFileInformationByHandle
IsProcessorFeaturePresent
FreeEnvironmentStringsW
GetModuleFileNameA
GetCurrentProcess
TerminateProcess
SetLastError
RtlUnwind
CloseHandle
DeleteFileA
VirtualProtect
CreateFileW
TlsSetValue
QueryPerformanceCounter
GetACP
GetFileAttributesW
GetLocaleInfoW
ExitThread
lstrlenW
LockFile
LocalAlloc
lstrcpynW
UnmapViewOfFile
LocalUnlock
lstrcmpW
GetStartupInfoA
OutputDebugStringW
GetUserDefaultUILanguage
GetSystemInfo
MultiByteToWideChar
FindClose
VirtualQuery
LocalReAlloc
GlobalLock
GetStdHandle
GetTickCount
GetLastError
GetEnvironmentStrings
user32
DrawTextExW
CheckDlgButton
GetWindowLongW
GetWindowRect
GetFocus
GetSystemMetrics
ReleaseDC
DestroyWindow
UnregisterClassW
SendMessageW
IsClipboardFormatAvailable
InvalidateRect
ChildWindowFromPoint
LoadIconW
SetCursor
CreateDialogParamW
wsprintfW
IsDialogMessageW
MessageBoxA
GetClientRect
UnhookWinEvent
SetActiveWindow
CloseClipboard
GetCursorPos
CharUpperA
GetClassNameA
SetForegroundWindow
GetDesktopWindow
TranslateAcceleratorW
GetKeyboardLayout
PostQuitMessage
GetWindowPlacement
CharUpperW
SetWinEventHook
DispatchMessageA
GetMenu
GetSysColor
UpdateWindow
CharNextW
OpenClipboard
IsIconic
SetDlgItemTextW
SetWindowTextW
GetActiveWindow
PeekMessageA
OffsetRect
RegisterClassExW
RegisterWindowMessageW
GetDC
GetSubMenu
MoveWindow
DispatchMessageW
MessageBoxW
GetMenuState
SetScrollPos
SendDlgItemMessageW
CharLowerW
SetPropA
EnableWindow
LoadAcceleratorsW
TrackPopupMenu
SetFocus
LoadCursorW
SetWindowLongW
DefWindowProcW
PostMessageW
IsWindowEnabled
GetDlgCtrlID
GetDlgItem
GetSystemMenu
GetDlgItemTextW
RegisterWindowMessageA
CreateWindowExW
GetWindowTextW
FillRect
SetWindowPlacement
GetMessageW
DialogBoxParamW
PeekMessageW
GetForegroundWindow
ShowWindow
ScreenToClient
MessageBeep
CheckMenuItem
TranslateMessage
EnableMenuItem
LoadImageW
KillTimer
GetWindowLongA
WinHelpW
LoadStringW
GetParent
EndDialog
advapi32
RegQueryValueExW
RegQueryValueExA
RegSetValueExW
IsTextUnicode
RegCreateKeyW
RegCloseKey
RegOpenKeyExA
gdi32
GetStockObject
LPtoDP
SetViewportExtEx
AbortDoc
EndDoc
GetTextFaceW
GetTextMetricsW
EnumFontsW
SelectObject
SetAbortProc
GetDeviceCaps
EndPage
TextOutW
StartPage
CreateDCW
SetWindowExtEx
StartDocW
SetBkMode
DeleteObject
DeleteDC
SetMapMode
GetTextExtentPoint32W
CreateFontIndirectW
GetObjectW
shell32
DragFinish
DragAcceptFiles
DragQueryFileW
ShellAboutW
comdlg32
PageSetupDlgW
GetFileTitleW
CommDlgExtendedError
FindTextW
GetOpenFileNameW
GetSaveFileNameW
PrintDlgExW
ChooseFontW
ReplaceTextW
winspool.drv
OpenPrinterW
GetPrinterDriverW
ClosePrinter
comctl32
CreateStatusWindowW
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 299KB - Virtual size: 299KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ