Static task
static1
Behavioral task
behavioral1
Sample
9c6616d94e02de0a00b5ccc4fc1c6a52.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9c6616d94e02de0a00b5ccc4fc1c6a52.exe
Resource
win10v2004-20231222-en
General
-
Target
9c6616d94e02de0a00b5ccc4fc1c6a52
-
Size
178KB
-
MD5
9c6616d94e02de0a00b5ccc4fc1c6a52
-
SHA1
5600d678c0cf6b0233ac0a92e11fc7f564f9c909
-
SHA256
a54acceb239bc157cc79c7e6547e2c159dedc3cee66e4e7568ec89e53f80551e
-
SHA512
9f3cf3667c134d1a62fea5739834364fc68505741869f759357050e0019e6ae90ffe60ac4365c7cd27283e17d178dae03c6f84fd7b034251cc25f68d71bc4e0d
-
SSDEEP
3072:fxP0o5mfFIcrFzc7ZScDRFKGRVMHiviKTFIqxOQR3nCoYRF9s5ITZRGpzN0NWwj4:R0fzry7ZScDbBVXRZIJD9R3iY4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c6616d94e02de0a00b5ccc4fc1c6a52
Files
-
9c6616d94e02de0a00b5ccc4fc1c6a52.exe windows:4 windows x86 arch:x86
ebc92c95ca286def468d956f66377f47
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
rpcrt4
NdrByteCountPointerFree
UuidToStringA
UuidCreate
RpcStringFreeA
kernel32
DeleteCriticalSection
RaiseException
TlsSetValue
GetFileSize
FlushInstructionCache
RtlUnwind
GetThreadContext
GetCurrentProcess
GetTempPathW
WaitForSingleObject
VirtualProtectEx
InterlockedIncrement
GlobalUnlock
CreateFileW
WriteProcessMemory
FormatMessageA
HeapFree
GetLastError
DuplicateHandle
ExitProcess
HeapAlloc
GlobalFree
SetLocaleInfoW
GetCurrentThreadId
GlobalAlloc
LocalFree
InterlockedDecrement
GetStartupInfoA
SetLastError
GetCommandLineA
GlobalLock
InterlockedExchange
GetVersionExW
GetWindowsDirectoryW
gdi32
BitBlt
DeleteDC
RealizePalette
GetObjectA
CreateCompatibleDC
SelectObject
SelectPalette
UnrealizeObject
SetMapMode
GetDeviceCaps
Sections
.text Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ