Static task
static1
Behavioral task
behavioral1
Sample
6c5bac53630b263d392622bc7c4ff8a4729b1524a6553e9303e29937bb921186.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6c5bac53630b263d392622bc7c4ff8a4729b1524a6553e9303e29937bb921186.exe
Resource
win10v2004-20240508-en
General
-
Target
6c5bac53630b263d392622bc7c4ff8a4729b1524a6553e9303e29937bb921186
-
Size
1.6MB
-
MD5
dbfa4b9e350e37354ab78936382613af
-
SHA1
c39fd35fc1a73d829c080fe2a381b410cce8f4c2
-
SHA256
6c5bac53630b263d392622bc7c4ff8a4729b1524a6553e9303e29937bb921186
-
SHA512
beeb728aa8b3ccf710581601e47e46718c27e7acf5dc7ea37dc50b6c94a50e07bc588349677bf6c24edd9da8a5736a816d7171c42ea1f50c76008280b0c04e75
-
SSDEEP
49152://JDoDHonE0KzwXbv9dMn6ZZXk/+ytjuGtl:/hDqHoNKsX5d26ZFkJtjuGtl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c5bac53630b263d392622bc7c4ff8a4729b1524a6553e9303e29937bb921186
Files
-
6c5bac53630b263d392622bc7c4ff8a4729b1524a6553e9303e29937bb921186.exe windows:4 windows x86 arch:x86
ee6342aabfec008ff5bcfb10252eec08
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
GetSystemInfo
IsBadReadPtr
CreateFileA
InterlockedExchange
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
Sleep
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
HeapFree
HeapReAlloc
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
WriteFile
SetFilePointer
FlushFileBuffers
SetUnhandledExceptionFilter
CloseHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
IsBadCodePtr
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
SetStdHandle
ReadFile
GetCPInfo
SetEndOfFile
user32
EndDialog
DefWindowProcA
DestroyWindow
DialogBoxParamA
BeginPaint
GetClientRect
DrawTextA
EndPaint
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
Sections
.text Size: 148KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ