Static task
static1
Behavioral task
behavioral1
Sample
606542f4df5adee87427529b4498fb7210ce6bdbb66354a02190007f2fdbfcb0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
606542f4df5adee87427529b4498fb7210ce6bdbb66354a02190007f2fdbfcb0.exe
Resource
win10v2004-20240226-en
General
-
Target
606542f4df5adee87427529b4498fb7210ce6bdbb66354a02190007f2fdbfcb0
-
Size
24KB
-
MD5
63184a959e378de05d171c3bf8102bf9
-
SHA1
0cb85fe6218af7a5ee4e38a667795be84d45e109
-
SHA256
606542f4df5adee87427529b4498fb7210ce6bdbb66354a02190007f2fdbfcb0
-
SHA512
396839aa67270d3553b99d9ac9eb6cbf82a77c76f3eb3083f19f8f6b472405e520c85cc157d1667b7260e163e0c32124ecce63ea5113937bc873a2db4d9bd857
-
SSDEEP
384:b2AsyDTIWwt2JdtTsGH1ARxruGO8o+4tdmuQc1PbJiWmJA:y+DT/jTsGVNQMfJifa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 606542f4df5adee87427529b4498fb7210ce6bdbb66354a02190007f2fdbfcb0
Files
-
606542f4df5adee87427529b4498fb7210ce6bdbb66354a02190007f2fdbfcb0.exe windows:4 windows x86 arch:x86
4517779c858c277fe37111eb804668e5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UpdateWindow
TranslateMessage
ShowWindow
SendMessageA
RegisterClassExA
PostQuitMessage
MessageBoxA
LoadIconA
LoadCursorA
LoadBitmapA
GetMessageA
EndPaint
DispatchMessageA
DestroyWindow
DefWindowProcA
CreateWindowExA
BeginPaint
kernel32
VirtualFree
ExitProcess
GetCommandLineA
LoadLibraryA
VirtualAlloc
CreateFileA
GetProcAddress
lstrlenA
lstrcpyA
WideCharToMultiByte
MultiByteToWideChar
gdi32
CreateCompatibleBitmap
CreateFontIndirectA
DeleteObject
CreateCompatibleDC
ole32
CoUninitialize
CoInitialize
CoCreateInstanceEx
oleaut32
SysFreeString
SysAllocStringLen
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ