Static task
static1
Behavioral task
behavioral1
Sample
f6a5092d0659c9c77c256badd6891fab14b07c96efdf282621086f3e1374ec85.exe
Resource
win7-20240508-en
General
-
Target
f6a5092d0659c9c77c256badd6891fab14b07c96efdf282621086f3e1374ec85
-
Size
626KB
-
MD5
6ee9eded12bc3bc4446ba0c203e60bc4
-
SHA1
5b74f7c39a1a8f39a97f785b4fac15b509471c09
-
SHA256
f6a5092d0659c9c77c256badd6891fab14b07c96efdf282621086f3e1374ec85
-
SHA512
adb5411f0c209414ccc1fc95c76505b165d8bb96c232c11e1c0cf9809b4ddfa5fbec1fca0415b9829fd49011956bf1cf287cd487e287c6e7285a666422d26191
-
SSDEEP
6144:eWcp9cfA5hpGA2uMSANzrSn4/d7OB1QZ8C8AOs+kUpyy+Rk:dBA5hpGA2uMSAZv58NZ+q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6a5092d0659c9c77c256badd6891fab14b07c96efdf282621086f3e1374ec85
Files
-
f6a5092d0659c9c77c256badd6891fab14b07c96efdf282621086f3e1374ec85.exe windows:6 windows x86 arch:x86
bd5dfb4f7a3242e65e480792e538ad63
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
VirtualAlloc
VirtualFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
CloseHandle
SetEvent
WaitForSingleObject
CreateEventA
Sleep
GetCurrentThreadId
SetLastError
CancelIo
ResetEvent
CreateEventW
lstrlenW
WideCharToMultiByte
GetFileAttributesA
GetExitCodeProcess
ResumeThread
CreateProcessA
GetThreadContext
SetThreadContext
OpenProcess
GetSystemDirectoryA
VirtualAllocEx
GetCurrentDirectoryA
CreateFileA
CreateFileW
GetFileSizeEx
WriteFile
IsDebuggerPresent
InitializeCriticalSectionEx
GetCurrentProcess
GetCurrentProcessId
CreateThread
CreateProcessW
GetStartupInfoW
GlobalMemoryStatusEx
GetSystemInfo
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
WinExec
MoveFileExA
GetConsoleWindow
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
GetLastError
RaiseException
DecodePointer
GetFileAttributesExW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetFileType
WriteConsoleW
GetCommandLineW
GetCommandLineA
GetStdHandle
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
InitializeSListHead
TerminateProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStringTypeW
OutputDebugStringW
QueryPerformanceCounter
GetSystemTimeAsFileTime
EncodePointer
CompareStringEx
MultiByteToWideChar
GetCPInfo
LCMapStringEx
user32
PostThreadMessageA
ShowWindow
GetInputState
GetCursorPos
advapi32
RegQueryValueExW
GetUserNameW
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyW
RegCloseKey
ws2_32
WSAIoctl
WSACleanup
WSAStartup
socket
setsockopt
send
select
recv
htons
connect
closesocket
gethostbyname
shlwapi
PathIsDirectoryA
winmm
timeGetTime
Sections
.text Size: 506KB - Virtual size: 506KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ