Static task
static1
Behavioral task
behavioral1
Sample
a6ef1e2bce388273a81097e4e1d90a1ad4dfb9a2a4ad9a1160329903d4ded6e1.exe
Resource
win10v2004-20240704-en
General
-
Target
a6ef1e2bce388273a81097e4e1d90a1ad4dfb9a2a4ad9a1160329903d4ded6e1
-
Size
270KB
-
MD5
7feaabf30bf585af6a8e7b2e2c55fc7b
-
SHA1
0d6d943b16980ffff969a6e1c61aa8b7e88e74a6
-
SHA256
a6ef1e2bce388273a81097e4e1d90a1ad4dfb9a2a4ad9a1160329903d4ded6e1
-
SHA512
4828c48f54643698ae2af4a0c0fef78afdf2729456ff333c9e93bd496a21d70606134531b047b36d268faa19bb6dc05b6a4c525aceaf1a3290c9bfcbae42e90e
-
SSDEEP
3072:6eGogd2fhsjKwwTz5XEnly9Bi8/E9Uds+cIQOP9p4BYoS4YFzxD6PDmYc3A/:/GoDhEKw8KnGEmmJOXiYRQiX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6ef1e2bce388273a81097e4e1d90a1ad4dfb9a2a4ad9a1160329903d4ded6e1
Files
-
a6ef1e2bce388273a81097e4e1d90a1ad4dfb9a2a4ad9a1160329903d4ded6e1.exe windows:5 windows x86 arch:x86
4bdd01efb3f9cfa329abd02683ca7679
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveVectoredExceptionHandler
IsBadStringPtrW
SetEndOfFile
FindResourceW
CreateDirectoryW
WriteConsoleInputA
GetModuleHandleW
VirtualFree
LoadLibraryW
GetModuleFileNameW
GetACP
ReplaceFileA
GlobalUnlock
GetLastError
SetLastError
GetProcAddress
CreateFileA
OpenMutexA
LocalAlloc
GlobalGetAtomNameW
EnumResourceTypesW
CancelIo
OpenFileMappingW
GetWindowsDirectoryW
HeapReAlloc
HeapSize
GetStringTypeW
MultiByteToWideChar
AttachConsole
GetDateFormatW
LCMapStringW
RtlUnwind
Sleep
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetCPInfo
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
RaiseException
user32
GetKeyboardLayoutNameA
SetMessageExtraInfo
GetCaretPos
InsertMenuItemW
CharUpperBuffW
DdeKeepStringHandle
GetClassInfoW
advapi32
GetLengthSid
ole32
CoRevokeClassObject
CoMarshalHresult
winhttp
WinHttpWriteData
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 186KB - Virtual size: 36.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ