Static task
static1
Behavioral task
behavioral1
Sample
06f1a42212e6a1581ddb3b55ac6d90abf2912b7edce084d21e5ba89d8dfa78ab.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
06f1a42212e6a1581ddb3b55ac6d90abf2912b7edce084d21e5ba89d8dfa78ab.exe
Resource
win10v2004-20240802-en
General
-
Target
06f1a42212e6a1581ddb3b55ac6d90abf2912b7edce084d21e5ba89d8dfa78ab
-
Size
39KB
-
MD5
f01b517aa6160ae02806d5c2e4b239f1
-
SHA1
ceca97df78c970544adca4acb62ba99f720673c3
-
SHA256
06f1a42212e6a1581ddb3b55ac6d90abf2912b7edce084d21e5ba89d8dfa78ab
-
SHA512
cc2f18c4ea14144e5173361fdbfe8fd60a50644946effa2bcf6883ab2b3596fc681406bcc4eb14df5a11b1a7478d1d1828939e98d80506abe04673a5d9a077c6
-
SSDEEP
384:u2T+/jvJ7+gFrJk04OMcYyOVJ9KRqnGTq/yX9k7uaaTiOmCdIniQ4dgDq:BOZ+gr36q1y/youIMdIniQTq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06f1a42212e6a1581ddb3b55ac6d90abf2912b7edce084d21e5ba89d8dfa78ab
Files
-
06f1a42212e6a1581ddb3b55ac6d90abf2912b7edce084d21e5ba89d8dfa78ab.exe windows:5 windows x86 arch:x86
b271bce6a1e17ebf9ac5fcd3deb5ff90
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowWindow
PostQuitMessage
GetMessageA
DispatchMessageA
SendMessageW
CreateWindowExA
RegisterClassExA
SendMessageA
DefWindowProcA
GetFocus
EnableWindow
UpdateWindow
IsZoomed
kernel32
CreateFileA
HeapAlloc
HeapCreate
CreateFileW
HeapDestroy
ExitProcess
gdi32
GetStockObject
comctl32
InitCommonControlsEx
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ