Static task
static1
Behavioral task
behavioral1
Sample
6ed8b41c0da5121fa6783ad4b849f85781ed0be8376b4d142f1f3bd2f5f8f56b.exe
Resource
win10v2004-20240508-en
General
-
Target
6ed8b41c0da5121fa6783ad4b849f85781ed0be8376b4d142f1f3bd2f5f8f56b
-
Size
333KB
-
MD5
3826dc5b5c45a28f226f43f21a42eb1d
-
SHA1
e9d96a1d123f16b819957e6950876576f771958a
-
SHA256
6ed8b41c0da5121fa6783ad4b849f85781ed0be8376b4d142f1f3bd2f5f8f56b
-
SHA512
544f487b0e77416aea326de1672cd89de32083ded70ab3a63b06644fa1aa9ce02758c01264af836d2a1925eed5aa640f2e0bc8ff8a9512a9907fbcbabadd39ce
-
SSDEEP
6144:jV8GBJnKdQ/2W56ipeS/If69FBXqNAfi4gPoKVKF23M:jV8GBJnp96i7/If697XQAfinR3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 6ed8b41c0da5121fa6783ad4b849f85781ed0be8376b4d142f1f3bd2f5f8f56b
Files
-
6ed8b41c0da5121fa6783ad4b849f85781ed0be8376b4d142f1f3bd2f5f8f56b.exe windows:5 windows x86 arch:x86
9ff74e81dccf9b53d18ebb7c781738ff
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedCompareExchange
GetComputerNameW
CreateHardLinkA
GetSystemDefaultLCID
GetTickCount
GlobalFindAtomA
LoadLibraryW
GetConsoleAliasW
IsBadWritePtr
IsBadStringPtrA
SetLastError
GetProcAddress
SetFileAttributesA
GetDiskFreeSpaceW
LoadLibraryA
LocalAlloc
OpenJobObjectA
GetNumberFormatW
GlobalHandle
EnumResourceTypesW
GetOEMCP
LoadLibraryExA
OpenFileMappingW
CreateMutexA
GetWindowsDirectoryW
CommConfigDialogW
SetStdHandle
WriteConsoleW
CloseHandle
SetFilePointer
FlushFileBuffers
GetConsoleMode
FindResourceA
TlsGetValue
GetComputerNameA
FindFirstVolumeMountPointW
GetSystemDefaultLangID
MultiByteToWideChar
DecodePointer
EncodePointer
GetLastError
HeapReAlloc
GetModuleHandleW
ExitProcess
GetCommandLineA
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
IsValidCodePage
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
HeapCreate
HeapFree
HeapAlloc
WriteFile
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
RtlUnwind
LCMapStringW
GetStringTypeW
HeapSize
RaiseException
GetConsoleCP
CreateFileW
user32
DdeCmpStringHandles
GetCaretPos
CloseWindow
GetKeyboardLayoutNameA
GetWindowTextLengthA
gdi32
GetCharacterPlacementA
advapi32
BackupEventLogA
ClearEventLogA
Sections
.text Size: 195KB - Virtual size: 195KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ