Static task
static1
Behavioral task
behavioral1
Sample
d6264602a66b50dac4b7562b459acadb.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d6264602a66b50dac4b7562b459acadb.exe
Resource
win10v2004-20240226-en
General
-
Target
d6264602a66b50dac4b7562b459acadb
-
Size
154KB
-
MD5
d6264602a66b50dac4b7562b459acadb
-
SHA1
d5e3895d34c8228b84a595723fe1f35c9ca8fe6d
-
SHA256
0c2fe396e3ab74bf57c7289255b66150fe478d3c7d0f4d4ffd6a189512c0e601
-
SHA512
74613fc0c04f2f00037d89c48e4ff22f1035f9627a263c9d0ea5f497fb9370f79699ef6bbb5ba9c3a726df90b78787df94232e834d4cf4a8124f41931a85d38f
-
SSDEEP
3072:S7IjjPugNI3AfGVtXZo4oq+i74kt6e1M3HH/ZNgMjsoQKN:S7IjLHM6GRo4R4g6e1M3HH/ZzR5N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6264602a66b50dac4b7562b459acadb
Files
-
d6264602a66b50dac4b7562b459acadb.exe windows:4 windows x86 arch:x86
fe7bc16170d851e9705f80b288dee930
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
HeapCreate
GetCommandLineA
GlobalUnlock
GetSystemDefaultLangID
GetConsoleCP
GetVersion
WaitForSingleObject
CloseHandle
HeapReAlloc
SetConsoleCP
SuspendThread
GetTickCount
InterlockedExchange
CompareFileTime
lstrlenA
VirtualProtect
LoadLibraryExA
GetAtomNameA
WaitForMultipleObjects
GetModuleHandleA
user32
DrawCaption
SetWindowPos
DestroyMenu
GetKeyboardLayout
FillRect
SetPropA
InvertRect
SetScrollInfo
DragObject
CreateIcon
IsDialogMessage
GetKeyState
DispatchMessageA
CopyImage
EnableScrollBar
DialogBoxParamA
GetCursorInfo
CreateMenu
FindWindowA
InsertMenuA
GetDlgItem
advapi32
RegCreateKeyExA
RegEnumKeyA
RegQueryInfoKeyA
RegEnumValueA
RegCloseKey
apphelp
ApphelpCheckExe
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 776KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ