Static task
static1
Behavioral task
behavioral1
Sample
c06d807e7287add5d460530e3d87648c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c06d807e7287add5d460530e3d87648c.exe
Resource
win10v2004-20240226-en
General
-
Target
c06d807e7287add5d460530e3d87648c
-
Size
257KB
-
MD5
c06d807e7287add5d460530e3d87648c
-
SHA1
d288550f1e35ba9406886906920f1afe7c965f71
-
SHA256
d5855e6292d04c6ab247c1b550168cde3d4a73831ed792cf15c1d0c650137e3d
-
SHA512
592b4cafe1d1060f8f05f54832e9c0f4baeb29c91dc9912f2f6f63819d96b766ae888c1483c5fc6b6c14093f8fd85ff03b4b76cc2910472740339a0305a5a20b
-
SSDEEP
6144:bajSf7oQiNDh3K8UBO4N6dH6oc+m7OymiPs5qg6D:bajSBYRGqda0EJE5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c06d807e7287add5d460530e3d87648c
Files
-
c06d807e7287add5d460530e3d87648c.exe windows:5 windows x86 arch:x86
b900dc5ab09e702140c5c289f35fb91f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord6
ord17
kernel32
GetCommandLineW
OutputDebugStringW
RtlUnwind
WriteConsoleW
HeapReAlloc
SetFilePointerEx
LCMapStringW
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetModuleHandleA
QueryPerformanceCounter
CloseHandle
CreateFileW
LoadLibraryExW
GetProcessHeap
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
LoadLibraryA
GetStdHandle
LocalFree
LocalAlloc
GetProcAddress
GetModuleFileNameW
GetModuleFileNameA
GetFileType
GetLastError
Sleep
GetCurrentProcessId
GlobalUnlock
GlobalLock
GlobalAlloc
GetConsoleCP
WriteFile
FlushFileBuffers
DeleteCriticalSection
IsProcessorFeaturePresent
HeapSize
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetStdHandle
HeapAlloc
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
HeapFree
GetConsoleMode
ReadConsoleInputA
SetConsoleMode
GetCommandLineA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThreadId
user32
TranslateAcceleratorA
GetMessageA
TranslateMessage
DispatchMessageA
SendMessageA
WaitForInputIdle
InflateRect
GetSysColorBrush
SetCursor
SetWindowTextA
EndDialog
DialogBoxIndirectParamA
LoadIconA
LoadCursorA
FindWindowExA
FindWindowA
MessageBoxA
GetClientRect
SetForegroundWindow
DefWindowProcA
UpdateWindow
LoadAcceleratorsA
EnableWindow
SetFocus
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
MoveWindow
ShowWindow
CreateWindowExA
RegisterClassExA
PostQuitMessage
gdi32
StartPage
EndDoc
StartDocA
SetMapMode
GetStockObject
GetDeviceCaps
DeleteDC
CreateDCA
EndPage
comdlg32
PrintDlgA
advapi32
RegQueryValueExA
RegEnumKeyA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExW
RegOpenKeyA
RegCreateKeyA
RegCloseKey
shell32
ShellExecuteExA
Sections
.text Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text0 Size: 134KB - Virtual size: 133KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE