Static task
static1
Behavioral task
behavioral1
Sample
ca6f4b2db6fb8ff1d8bf66d84d463cd7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ca6f4b2db6fb8ff1d8bf66d84d463cd7.exe
Resource
win10v2004-20240226-en
General
-
Target
ca6f4b2db6fb8ff1d8bf66d84d463cd7
-
Size
560KB
-
MD5
ca6f4b2db6fb8ff1d8bf66d84d463cd7
-
SHA1
0d8d7b708c48216a917d53e93166fa989b29e9ea
-
SHA256
e678ec8a5821959aa4d5ebd9887bcc9a187d2b83764ee0a68631903c45eb01d8
-
SHA512
91a948be3637f993e8bbcfed816aba9fb65c14a46225bdbc3e47a2d48663c15ef3f4b4dc50b7dca2849d59413bb6b6a5570c22da696de44b299d1162cf89acb1
-
SSDEEP
12288:X6KOxoB/ivB3HGtH00HKEMW2yx/+6DS6z0n:K/awB3gpHTMWl20nz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca6f4b2db6fb8ff1d8bf66d84d463cd7
Files
-
ca6f4b2db6fb8ff1d8bf66d84d463cd7.exe windows:4 windows x86 arch:x86
5f4122ea0f5d14985a21785ca34ba3f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsA
SetHandleCount
GlobalGetAtomNameA
GetCPInfo
GetStringTypeW
FreeLibraryAndExitThread
EnumSystemCodePagesA
CreateWaitableTimerW
CommConfigDialogA
GetTempFileNameA
EnterCriticalSection
VirtualAlloc
InitializeCriticalSection
ReadConsoleOutputCharacterA
GetConsoleTitleW
lstrcmpW
SetEvent
SetThreadIdealProcessor
VirtualLock
VirtualUnlock
TerminateProcess
WriteFile
ReadConsoleOutputW
SetFilePointer
QueryPerformanceCounter
TlsSetValue
InterlockedExchange
SetStdHandle
LCMapStringA
GetPrivateProfileStructW
GetCurrentProcess
GetVersionExA
GetSystemTime
HeapReAlloc
GetMailslotInfo
SetEndOfFile
GetStringTypeA
GetLocaleInfoW
GetProcessHeaps
WritePrivateProfileStringA
HeapAlloc
IsValidCodePage
TryEnterCriticalSection
GetModuleHandleA
GetSystemTimeAsFileTime
OpenEventW
GetConsoleScreenBufferInfo
GetEnvironmentStrings
TlsAlloc
WaitCommEvent
HeapSize
GetDriveTypeW
MultiByteToWideChar
CloseHandle
GlobalLock
GetThreadPriorityBoost
SetEnvironmentVariableA
lstrcatA
GetCurrentThreadId
WriteConsoleOutputW
TlsFree
OpenMutexA
CommConfigDialogW
GetProfileStringA
FlushInstructionCache
GetTickCount
GetACP
LoadLibraryA
FlushFileBuffers
ReadFile
LCMapStringW
GetEnvironmentStringsW
GetCommandLineA
CreateMutexA
HeapCreate
FindFirstFileW
GetThreadSelectorEntry
GetStdHandle
lstrcat
WideCharToMultiByte
lstrlenW
lstrcpyW
GetDateFormatA
GlobalUnlock
SetThreadPriority
OpenProcess
FreeEnvironmentStringsW
HeapFree
FindResourceExA
WritePrivateProfileSectionA
SetLastError
WaitForSingleObject
ResetEvent
GetTimeFormatA
ExitProcess
GetUserDefaultLCID
CompareStringW
GetCurrentProcessId
IsBadWritePtr
RaiseException
HeapDestroy
GetOEMCP
GetCurrentThread
SetCriticalSectionSpinCount
GetCalendarInfoA
GetVolumeInformationW
GetLocaleInfoA
UnmapViewOfFile
GetFileType
VirtualFree
LocalShrink
CompareStringA
MoveFileW
lstrlenA
GetModuleFileNameA
RtlUnwind
VirtualQuery
GetStartupInfoA
GetLastError
LeaveCriticalSection
LockResource
WriteFileEx
GetTimeZoneInformation
GetProcAddress
DeleteCriticalSection
FillConsoleOutputCharacterW
VirtualProtect
lstrcmpA
FoldStringW
WaitForDebugEvent
OpenWaitableTimerW
IsValidLocale
UnhandledExceptionFilter
EnumSystemLocalesA
WriteConsoleOutputCharacterW
GetSystemInfo
GetShortPathNameW
VirtualAllocEx
TlsGetValue
user32
CreateDialogParamA
DestroyMenu
LockWindowUpdate
GetPropW
SetDlgItemInt
DefWindowProcA
SetWindowRgn
GetFocus
DrawMenuBar
FreeDDElParam
ToAsciiEx
TrackPopupMenu
CreateWindowExA
ClipCursor
ImpersonateDdeClientWindow
VkKeyScanA
ChangeDisplaySettingsExA
WinHelpA
RealGetWindowClass
GetCursorInfo
RegisterClassW
DlgDirSelectComboBoxExW
IsCharUpperA
ShowWindow
DestroyWindow
GetKeyboardLayout
EqualRect
UnregisterDeviceNotification
MessageBoxW
GetDCEx
DrawIconEx
CharUpperW
DestroyCaret
PostThreadMessageW
FindWindowW
DdeCreateDataHandle
SetMenuItemInfoW
RegisterClassA
GetKeyNameTextA
RegisterClassExA
wininet
InternetCanonicalizeUrlA
InternetErrorDlg
InternetAlgIdToStringW
gdi32
SetPolyFillMode
CreateHatchBrush
CreateDCW
CombineTransform
GetDeviceCaps
SetStretchBltMode
GetObjectA
IntersectClipRect
GetMetaRgn
PaintRgn
SetICMMode
EnumMetaFile
SetDeviceGammaRamp
GetAspectRatioFilterEx
DeleteDC
comctl32
CreatePropertySheetPageA
ImageList_GetImageRect
ImageList_Copy
CreatePropertySheetPageW
InitCommonControlsEx
DrawStatusText
Sections
.text Size: 156KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 249KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ