Static task
static1
Behavioral task
behavioral1
Sample
f6087e99f621de3449f2f1b9eb3c311954cce230f203dd30745ab880a83e6f4e.exe
Resource
win10v2004-20240412-en
Behavioral task
behavioral2
Sample
f6087e99f621de3449f2f1b9eb3c311954cce230f203dd30745ab880a83e6f4e.exe
Resource
win7-20240221-en
Behavioral task
behavioral3
Sample
f6087e99f621de3449f2f1b9eb3c311954cce230f203dd30745ab880a83e6f4e.exe
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
f6087e99f621de3449f2f1b9eb3c311954cce230f203dd30745ab880a83e6f4e.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
f6087e99f621de3449f2f1b9eb3c311954cce230f203dd30745ab880a83e6f4e.exe
Resource
win11-20240412-en
General
-
Target
f6087e99f621de3449f2f1b9eb3c311954cce230f203dd30745ab880a83e6f4e
-
Size
2.0MB
-
MD5
7cce6989f730b8f296d2c592932d405a
-
SHA1
dc80fddc5f5201f13265c5ee3aed03ef3ccbad7e
-
SHA256
f6087e99f621de3449f2f1b9eb3c311954cce230f203dd30745ab880a83e6f4e
-
SHA512
9bcb1d6e42e20a9b5787266978eb56f399591aa6c9c45de38d504f7186c5a166eabad5bb534f0ce246129bb7228c3a5ac5fbbf50ae976cca869f39e42cbde7de
-
SSDEEP
24576:l2ZIVjFxbxJMgQ5DIiJ1KxwflAbWgj8RuFwTXJsK63Ct6ij0V+uYzjy2QhL8Gbgt:kC9pagQFIE1KbkYF+X70V+hy7hAI1UR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6087e99f621de3449f2f1b9eb3c311954cce230f203dd30745ab880a83e6f4e
Files
-
f6087e99f621de3449f2f1b9eb3c311954cce230f203dd30745ab880a83e6f4e.exe windows:5 windows x86 arch:x86
a78e7a6400453cb536eea876b9168fc0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLocaleInfoA
PeekNamedPipe
ConvertThreadToFiber
InterlockedIncrement
InterlockedDecrement
GetNamedPipeHandleStateA
GetEnvironmentStringsW
WriteConsoleInputA
SetVolumeMountPointW
GetModuleHandleW
LocalFlags
ReadConsoleW
GetWindowsDirectoryA
GlobalAlloc
LoadLibraryW
GetLocaleInfoW
GetVersionExW
GetConsoleAliasW
WriteConsoleW
WritePrivateProfileSectionW
ReadFile
GetCompressedFileSizeA
GetStartupInfoW
VirtualUnlock
FindFirstFileA
GetCPInfoExW
GetLastError
SetLastError
GetProcAddress
HeapSize
IsValidCodePage
OpenWaitableTimerA
WriteConsoleA
LocalAlloc
FindFirstVolumeMountPointW
UpdateResourceW
FindNextFileW
GetCurrentDirectoryA
WaitForDebugEvent
GetVolumeNameForVolumeMountPointW
GlobalAddAtomW
GetProfileSectionW
CommConfigDialogW
CreateFileW
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetCommandLineW
LocalUnlock
GetShortPathNameA
DebugActiveProcess
GetConsoleCP
SetFilePointer
WideCharToMultiByte
InterlockedExchange
MultiByteToWideChar
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
DeleteFileA
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
LCMapStringW
IsProcessorFeaturePresent
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapCreate
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetACP
GetOEMCP
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
WriteFile
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
CloseHandle
user32
CharToOemBuffA
CharUpperBuffW
GetDlgCtrlID
gdi32
GetCharWidthW
advapi32
DuplicateToken
winhttp
WinHttpCloseHandle
Sections
.text Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1.7MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ