Static task
static1
Behavioral task
behavioral1
Sample
b6ba8e8855d6e4799ab1a1cd34e7d06c.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b6ba8e8855d6e4799ab1a1cd34e7d06c.exe
Resource
win10v2004-20240226-en
General
-
Target
b6ba8e8855d6e4799ab1a1cd34e7d06c
-
Size
16KB
-
MD5
b6ba8e8855d6e4799ab1a1cd34e7d06c
-
SHA1
1653192159d1fe5c3b85fd83c92cbb3e74e85d11
-
SHA256
39679bcf221f0c1ff55424c74f8f265cf3e5d49e8c89d23f0f3a648126f8e8c4
-
SHA512
c9103405dd25fe16250e78b46393814f5889b385fdb6585d4f9ca71c648082803145a94535bcfbfea08c95d841185ba856698057a1988fa1a471dad95f680eab
-
SSDEEP
192:umk8zyKcMqaeyDC+uy0K/uNPiVHDreyUAB0P4oynZFVSvzb:umk4cMRDC+h2hihna4/FMvH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6ba8e8855d6e4799ab1a1cd34e7d06c
Files
-
b6ba8e8855d6e4799ab1a1cd34e7d06c.exe windows:4 windows x86 arch:x86
a12c82467c1e27d95a656f7906ac5c7c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
strlen
_controlfp
__p__fmode
_except_handler3
__set_app_type
__setusermatherr
__p___initenv
_initterm
__p__commode
_adjust_fdiv
__getmainargs
fgets
sprintf
_stricmp
strstr
memset
exit
_XcptFilter
_exit
strcmp
strcat
strcpy
fopen
fprintf
fflush
fclose
kernel32
CreateThread
OpenProcess
ReleaseMutex
GetSystemDirectoryA
Sleep
CreateProcessA
TerminateProcess
GetLastError
Process32First
Process32Next
CreateToolhelp32Snapshot
CreateMutexA
FindClose
FindFirstFileA
WaitForSingleObject
MoveFileExA
CloseHandle
user32
EnumWindows
GetWindowThreadProcessId
GetWindowLongA
GetParent
advapi32
DeleteService
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
QueryServiceConfigA
ChangeServiceConfigA
ControlService
SetServiceStatus
CreateServiceA
StartServiceA
QueryServiceStatus
OpenSCManagerA
OpenServiceA
CloseServiceHandle
shell32
ShellExecuteA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE