Static task
static1
Behavioral task
behavioral1
Sample
6c8471e8c37e0a3d608184147f89d81d62f9442541a04d15d9ead0b3e0862d95.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
6c8471e8c37e0a3d608184147f89d81d62f9442541a04d15d9ead0b3e0862d95.exe
Resource
win10v2004-20240226-en
General
-
Target
6c8471e8c37e0a3d608184147f89d81d62f9442541a04d15d9ead0b3e0862d95
-
Size
475KB
-
MD5
2eafd0c5c2bf567631e08c999edb17cd
-
SHA1
5872be323ed4f7ad2e6a98139fcff0d0f601501a
-
SHA256
6c8471e8c37e0a3d608184147f89d81d62f9442541a04d15d9ead0b3e0862d95
-
SHA512
31fa42f49ca23adda943605268a4a3824b015c1bd8a66d4e45b713b7ae28ddaebbf99c80d2d5e0f3efb73b3dd00190c9052b6662072d43b23af8bad49d9d82ea
-
SSDEEP
12288:F+KmunZn5eD36YoUT3M23YL5UVyRU44nwk02ulzsN4ps78o:F+K3Zu3fo3saRU4Ewqr78o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c8471e8c37e0a3d608184147f89d81d62f9442541a04d15d9ead0b3e0862d95
Files
-
6c8471e8c37e0a3d608184147f89d81d62f9442541a04d15d9ead0b3e0862d95.exe windows:6 windows x86 arch:x86
19efded23c0912e37438dce18f2c4a5f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileW
HeapFree
FindNextFileW
Wow64DisableWow64FsRedirection
GetModuleFileNameW
InitializeCriticalSectionEx
FindClose
WaitForSingleObject
HeapSize
MultiByteToWideChar
Sleep
Wow64RevertWow64FsRedirection
GetLastError
LockResource
DeleteFileW
GlobalFree
HeapReAlloc
CloseHandle
RaiseException
FindResourceExW
LoadResource
FindResourceW
HeapAlloc
DecodePointer
HeapDestroy
DeleteCriticalSection
GetProcessHeap
CreateProcessW
CopyFileW
WideCharToMultiByte
SizeofResource
WriteConsoleW
CreateFileW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
ReadFile
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetFileType
SetFilePointerEx
GetFileSizeEx
WriteFile
GetStdHandle
GetModuleHandleExW
SleepEx
CreateDirectoryW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
EncodePointer
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
OutputDebugStringW
RtlUnwind
FreeLibrary
LoadLibraryExW
ExitProcess
SetEndOfFile
shell32
ShellExecuteExW
ole32
CoCreateInstance
CoUninitialize
CoInitialize
oleaut32
SysAllocStringLen
winhttp
WinHttpCloseHandle
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpWriteData
WinHttpSendRequest
WinHttpSetOption
WinHttpConnect
WinHttpCrackUrl
WinHttpQueryDataAvailable
WinHttpOpen
WinHttpReceiveResponse
WinHttpReadData
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpQueryHeaders
WinHttpSetTimeouts
rpcrt4
UuidToStringA
UuidCreate
iphlpapi
GetAdaptersInfo
Sections
.text Size: 358KB - Virtual size: 358KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ