Static task
static1
Behavioral task
behavioral1
Sample
6108991257ff71bcfd430287f62f48e380c4adfdae206de812f5f7572424ba99.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6108991257ff71bcfd430287f62f48e380c4adfdae206de812f5f7572424ba99.exe
Resource
win10v2004-20240508-en
General
-
Target
6108991257ff71bcfd430287f62f48e380c4adfdae206de812f5f7572424ba99
-
Size
162KB
-
MD5
1a5ddc03c90901f3d105c938fccb9d28
-
SHA1
5d5ec8bcc29894729a40fa4e7d73ca08fe596b4d
-
SHA256
6108991257ff71bcfd430287f62f48e380c4adfdae206de812f5f7572424ba99
-
SHA512
e9a28807ac04d6a4888850f418a25d9e0ec2d0af2a5b5c6b68a3da91147fcd429fd56031210b8af9f723d942b660d5bbc60aaa86486ff66f0a5f5c84d3bd3ded
-
SSDEEP
3072:4nK0ND640taWiZ6NNyoFbslR1n2O9W+X2fsg8mF5PsVW1+IgqWuEmAUEw3:ieXiENsljnZ01YmL+W1eWbD3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6108991257ff71bcfd430287f62f48e380c4adfdae206de812f5f7572424ba99
Files
-
6108991257ff71bcfd430287f62f48e380c4adfdae206de812f5f7572424ba99.exe windows:4 windows x86 arch:x86
b3557dffa6d810f6a9d28e0300f50338
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
GetExitCodeProcess
GetDriveTypeA
GetSystemDirectoryA
GetCurrentDirectoryA
CloseHandle
GetDiskFreeSpaceA
WaitForSingleObject
CreateEventA
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
GetProcessHeap
CreateFileA
SetFileTime
CreateThread
LocalFileTimeToFileTime
CreateDirectoryA
HeapAlloc
HeapFree
SetFilePointer
ReadFile
WriteFile
ExitProcess
GetLastError
RemoveDirectoryA
DeleteFileA
TerminateProcess
SetEvent
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
DosDateTimeToFileTime
FormatMessageA
user32
EndDialog
SendDlgItemMessageA
LoadStringA
DialogBoxParamA
ShowWindow
SendMessageA
MessageBoxA
comctl32
ord17
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
ntdll
strstr
_allmul
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zero Size: - Virtual size: 66KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 137KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE