Static task
static1
Behavioral task
behavioral1
Sample
d6577f85c2fe389735b7ae16a0fb12a5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d6577f85c2fe389735b7ae16a0fb12a5.exe
Resource
win10v2004-20240226-en
General
-
Target
d6577f85c2fe389735b7ae16a0fb12a5
-
Size
114KB
-
MD5
d6577f85c2fe389735b7ae16a0fb12a5
-
SHA1
e46b18df0113e3194ee481a8119b356d244c58c0
-
SHA256
328dfa0310e4f447a4587ef01fa7868203bbc940f3c98f9b2ce2aaf963bc9020
-
SHA512
6b799fe4df4d4878dfafce2e5b07f7678e5a2a659f99841560758a4e944e344c183b7fb67843c6c1404d1e1bf966406b22cc7f6a54623bebc90efea9544cc278
-
SSDEEP
1536:pbaFMjN0sw4XLnKeZJPiU1xua63WceCO+9AxNAPJ+BvkdajERMPhPitQk/:pg4N0InKe3hMbeCLaNI+BvkgomPhcP/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6577f85c2fe389735b7ae16a0fb12a5
Files
-
d6577f85c2fe389735b7ae16a0fb12a5.exe windows:5 windows x86 arch:x86
862f557ccff552094cc605157c74acc2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetSystemMetrics
TranslateMessage
GetDesktopWindow
GetParent
CharNextA
gdi32
DeleteObject
SetMapMode
GetTextMetricsA
GetPixel
SelectPalette
PatBlt
GetStockObject
CreateCompatibleDC
CreateFontIndirectA
SetTextColor
GetObjectA
SelectObject
SetTextAlign
LineTo
CreatePen
SaveDC
GetDeviceCaps
SetStretchBltMode
DeleteDC
GetClipBox
CreateSolidBrush
RestoreDC
CreatePalette
RectVisible
SetPixel
kernel32
GetUserDefaultLangID
lstrcmpiA
GetTickCount
GetCurrentThread
GetDriveTypeA
GetACP
GetThreadLocale
lstrcmpiW
GetCurrentThreadId
CopyFileA
IsDebuggerPresent
GetWindowsDirectoryA
GetCommandLineA
lstrlenA
GetCurrentProcess
GetProcessHeap
GetVersion
DeleteFileW
GetCommandLineW
GetModuleHandleA
GetOEMCP
lstrcmpA
lstrlenW
MulDiv
GlobalFindAtomA
RemoveDirectoryA
SetCurrentDirectoryA
GetStartupInfoA
GlobalFindAtomW
GetConsoleOutputCP
GetModuleHandleW
GetCurrentProcessId
RemoveDirectoryW
DeleteFileA
QueryPerformanceCounter
VirtualAlloc
VirtualFree
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ