Static task
static1
Behavioral task
behavioral1
Sample
d6acefa22ee4455d341490106d7f0699.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d6acefa22ee4455d341490106d7f0699.exe
Resource
win10v2004-20240226-en
General
-
Target
d6acefa22ee4455d341490106d7f0699
-
Size
85KB
-
MD5
d6acefa22ee4455d341490106d7f0699
-
SHA1
da515b930de80098dcb13d19ef95134bfa4d62c9
-
SHA256
e41810a9367f942a09f2a45f40a0327c868b642387e7670cf0f70b2b6d6af457
-
SHA512
74ffa663cdc5faedea202a4d163cd6976ca7a3791cbe07192cdb1add745f420862028908f5882991a5d855ccb61e997259c399978526b782c88249f2a3370646
-
SSDEEP
1536:D7XTaqagddwXSnaZXU/ikPg7efigxwxHctBP5tJxb7hCcpJHX1x6n:D7XTaqxyzZEZPg7eq8ycthBxbFin
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6acefa22ee4455d341490106d7f0699
Files
-
d6acefa22ee4455d341490106d7f0699.exe windows:4 windows x86 arch:x86
cdfd6f0f5b2f37c458b3c331667eef44
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetModuleHandleA
SuspendThread
LoadLibraryExA
GetTickCount
HeapReAlloc
WaitForMultipleObjects
GlobalUnlock
WaitForSingleObject
lstrlenA
GetCommandLineA
InterlockedExchange
GetAtomNameA
GetVersion
HeapCreate
CompareFileTime
VirtualProtect
GetSystemDefaultLangID
SetConsoleCP
GetStdHandle
GetConsoleCP
user32
IsDialogMessage
InvertRect
DrawCaption
DialogBoxParamA
FillRect
DestroyMenu
SetScrollInfo
DispatchMessageA
CreateIcon
InsertMenuA
DragObject
CreateMenu
GetCursorInfo
CopyImage
GetDlgItem
GetKeyState
GetKeyboardLayout
SetPropA
FindWindowA
SetWindowPos
EnableScrollBar
advapi32
RegCloseKey
RegCreateKeyExA
RegEnumKeyA
RegQueryInfoKeyA
RegEnumValueA
apphelp
ApphelpCheckExe
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ