Static task
static1
Behavioral task
behavioral1
Sample
c6616e3ee0f862cc7228a05b57799c20N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c6616e3ee0f862cc7228a05b57799c20N.exe
Resource
win10v2004-20240802-en
General
-
Target
c6616e3ee0f862cc7228a05b57799c20N.exe
-
Size
208KB
-
MD5
c6616e3ee0f862cc7228a05b57799c20
-
SHA1
02f2830a1d9de5b85f4597488ece6f4c4d68e79e
-
SHA256
66734a8d26633f15c99cd05f9f475d41a86bc77b7956346ea04b0de1074139b5
-
SHA512
275def78a2a7030dc560e1e382e8802f37dc01429cf0d9d6fd011dd5ada196d440c3b4dfbb6dcc545a372a5d21766e43aeebfd834a78b56367f8693910b9a1d4
-
SSDEEP
6144:yJRDxRqdSqQts6iRZsTZuDbhivDVDN8zqF3:ycjQKUZigDVJ5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6616e3ee0f862cc7228a05b57799c20N.exe
Files
-
c6616e3ee0f862cc7228a05b57799c20N.exe.exe windows:4 windows x86 arch:x86
91c8557273d46cefa6ad80b57deb236d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindAtomA
SetCalendarInfoA
FindResourceA
lstrcmp
GetDateFormatW
SetCurrentDirectoryA
CopyFileA
DisconnectNamedPipe
LoadLibraryA
SuspendThread
GetProcAddress
user32
PostQuitMessage
SetFocus
RemoveMenu
EnumChildWindows
MessageBoxIndirectW
GetDC
LoadMenuW
GetActiveWindow
LoadMenuA
EnumDesktopWindows
RegisterWindowMessageA
GetWindowTextW
EnumDesktopsW
GetClassNameA
LoadCursorA
GetWindowTextA
GetTopWindow
LoadBitmapA
GetMenuInfo
GetCapture
wvsprintfA
SetCursorPos
IsDlgButtonChecked
GetMenuStringW
CheckMenuRadioItem
DestroyWindow
SetActiveWindow
AppendMenuW
GetDlgItemTextW
UpdateLayeredWindow
IsChild
CreateDialogParamW
GetMenuStringA
ShowCaret
GetKeyState
GetCaretPos
GetCapture
CreateWindowExA
CheckDlgButton
GetIconInfo
CopyImage
WinHelpA
CopyIcon
DialogBoxParamA
GetDC
gdi32
GetGlyphIndicesA
GetColorAdjustment
GetTextCharset
GetTextColor
CreatePen
SetSystemPaletteUse
SwapBuffers
GetICMProfileA
GetFontUnicodeRanges
StartPage
CreateDCA
SetWinMetaFileBits
advapi32
RegCreateKeyExA
RegDeleteKeyW
RegEnumValueA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExW
RegOpenKeyW
shell32
SHGetDataFromIDListA
SHGetFileInfoW
shlwapi
PathRemoveBlanksW
UrlHashA
PathIsDirectoryEmptyW
StrStrNIW
StrCmpNA
PathIsContentTypeA
PathAppendA
PathRemoveBackslashA
PathSkipRootA
PathGetDriveNumberW
PathSearchAndQualifyW
ole32
CoUninitialize
inetcomm
HrGetLastOpenFileDirectory
MimeEditIsSafeToRun
EssSecurityLabelDecodeEx
CreateSMTPTransport
HrDoAttachmentVerb
MimeOleGetDefaultCharset
MimeOleSMimeCapsFull
oledlg
OleUIChangeSourceA
OleUIUpdateLinksW
OleUIConvertW
OleUIObjectPropertiesA
OleUIUpdateLinksA
OleUIBusyA
OleUIPasteSpecialA
OleUIEditLinksW
crypt32
CryptStringToBinaryA
PFXExportCertStore
CertCreateContext
CertGetCRLFromStore
CertFindChainInStore
CertFindAttribute
RegOpenHKCUKeyExU
I_CertUpdateStore
CertGetIntendedKeyUsage
CertDuplicateCRLContext
CryptMsgControl
CryptBinaryToStringA
Sections
.ZYkKE Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.peSRE Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ig Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 381KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.LI Size: 3KB - Virtual size: 481KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 878B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ