Static task
static1
Behavioral task
behavioral1
Sample
6ee0d79a31bd8ce1890b5faa8de08c3a69d138ca3eb96cb0fcb4260d16d371bc.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6ee0d79a31bd8ce1890b5faa8de08c3a69d138ca3eb96cb0fcb4260d16d371bc.exe
Resource
win10v2004-20240611-en
General
-
Target
6ee0d79a31bd8ce1890b5faa8de08c3a69d138ca3eb96cb0fcb4260d16d371bc
-
Size
1.5MB
-
MD5
43f9277ef367fb777d903498ee633946
-
SHA1
3e5abcdfbe9c27da0708efaef3e25eb8417d69d4
-
SHA256
6ee0d79a31bd8ce1890b5faa8de08c3a69d138ca3eb96cb0fcb4260d16d371bc
-
SHA512
a1a0f35b6961273fae324aaa13ff70bf9ecbc4456f2080dff3d9132fe94cbce97e6d5015b0eb592852e5aee74e95b9f1fb5aa1fb5e598d90d77a6bfa64f59947
-
SSDEEP
24576:pG1WGQ//6Y8Icti46D6w9Ts4khCTxT26rUcjtfV/KK3mrqa8mrg1t7ve110H:pGYGQ/j8Ih4019zF5qBrImrgX611S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ee0d79a31bd8ce1890b5faa8de08c3a69d138ca3eb96cb0fcb4260d16d371bc
Files
-
6ee0d79a31bd8ce1890b5faa8de08c3a69d138ca3eb96cb0fcb4260d16d371bc.exe windows:4 windows x86 arch:x86
347fe6c786110209810a18d51211def8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
user32
OpenClipboard
gdi32
CreateDIBitmap
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
VariantInit
comctl32
ord17
ws2_32
recvfrom
comdlg32
GetFileTitleA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 472KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 960KB - Virtual size: 960KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ