Static task
static1
Behavioral task
behavioral1
Sample
6c6201b7c8a93c96e31ea037a5886b550b4593f895892dddad2728ddaf435dd2.exe
Resource
win7-20240221-en
General
-
Target
6c6201b7c8a93c96e31ea037a5886b550b4593f895892dddad2728ddaf435dd2
-
Size
785KB
-
MD5
da3ba48e9918f1673c923b048565d7e5
-
SHA1
f776626cba1738c49285175732c558a506dfa7af
-
SHA256
6c6201b7c8a93c96e31ea037a5886b550b4593f895892dddad2728ddaf435dd2
-
SHA512
b0b533e9459c95ad6ace6624479034eed8fc5219be7f38ebd75b3ca17d20e58d173fbd40ab7497f4201421754867b665f541668c9eff91387c88a84f852717df
-
SSDEEP
24576:OIJ9IY3qBss7xaiWEkc9QcjmXE+6o027b:duD7siWEkc90E+60b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 6c6201b7c8a93c96e31ea037a5886b550b4593f895892dddad2728ddaf435dd2
Files
-
6c6201b7c8a93c96e31ea037a5886b550b4593f895892dddad2728ddaf435dd2.exe windows:5 windows x86 arch:x86
18847fd5ec2a4fec862eea659987da37
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetModuleHandleW
GetLastError
CreateMutexW
GetProcAddress
LoadLibraryW
GetSystemDefaultLangID
GetCommandLineW
WriteConsoleW
GetConsoleMode
GetConsoleCP
HeapSize
SetStdHandle
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
CreateEventA
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetTimeZoneInformation
GetFileType
SetConsoleCtrlHandler
GetACP
GetStdHandle
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
InterlockedPushEntrySList
RtlUnwind
OpenFileMappingW
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
WritePrivateProfileStringW
GetPrivateProfileStringW
MulDiv
GlobalFree
CloseHandle
GlobalAlloc
FindFirstFileExW
SetEvent
OutputDebugStringW
CreateProcessW
lstrlenA
InitializeCriticalSection
DebugBreak
CreateThread
GetExitCodeProcess
InterlockedIncrement
lstrlenW
RaiseException
InterlockedDecrement
GetStartupInfoW
GetVersionExW
WideCharToMultiByte
MultiByteToWideChar
WaitForSingleObjectEx
GetFileAttributesW
SetLastError
GetShortPathNameW
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
GetSystemTimeAsFileTime
LocalFree
FormatMessageW
FormatMessageA
GetProcessHeap
HeapFree
HeapAlloc
FreeLibrary
GetSystemInfo
GlobalMemoryStatus
GetCurrentProcess
WaitForSingleObject
GetModuleFileNameW
GetTempPathW
GetTempFileNameW
ReleaseSemaphore
CreateFileW
ReadFile
WriteFile
FlushFileBuffers
SetFilePointer
SetEndOfFile
GetFileSize
GetFileInformationByHandle
QueryPerformanceCounter
QueryPerformanceFrequency
VirtualAlloc
VirtualFree
GetCurrentThread
SetThreadPriority
Sleep
TerminateProcess
IsDebuggerPresent
GetModuleHandleA
GetCurrentProcessId
GetStringTypeW
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
CreateDirectoryW
DeleteFileW
GetFileAttributesExW
RemoveDirectoryW
SetFilePointerEx
DeviceIoControl
FindClose
FindNextFileW
AreFileApisANSI
ResetEvent
WaitForMultipleObjectsEx
OpenEventA
SetWaitableTimer
ResumeThread
CreateWaitableTimerA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
user32
MessageBoxW
RegisterWindowMessageW
PostMessageW
MessageBoxExW
KillTimer
SetWindowLongW
GetWindowLongW
MapWindowPoints
GetWindowRect
GetClientRect
SetTimer
GetWindow
MoveWindow
PostQuitMessage
DestroyMenu
TrackPopupMenu
GetMessagePos
SetForegroundWindow
AppendMenuW
CreatePopupMenu
UnhookWindowsHookEx
SetWindowsHookExW
SendMessageW
CallNextHookEx
DefWindowProcW
ShowWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
DispatchMessageW
TranslateMessage
DestroyWindow
GetMessageW
LoadIconW
GetDC
LoadStringW
CharNextW
GetActiveWindow
shell32
SHFileOperationW
SHGetSpecialFolderPathW
ShellExecuteExW
Shell_NotifyIconW
urlmon
ObtainUserAgentString
wininet
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetOpenA
InternetConnectA
winmm
timeGetTime
gdi32
GetDeviceCaps
SetLayout
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
rpcrt4
UuidToStringA
RpcStringFreeA
advapi32
RegOpenKeyExW
AdjustTokenPrivileges
RegQueryValueExW
OpenProcessToken
RegCloseKey
ole32
CoCreateGuid
Sections
.text Size: 521KB - Virtual size: 521KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 14KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 102KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE