Static task
static1
Behavioral task
behavioral1
Sample
6c2b21f0366b3942ae23d428155856a3deedccf6dcd00f3e27652a625455367d.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6c2b21f0366b3942ae23d428155856a3deedccf6dcd00f3e27652a625455367d.exe
Resource
win10v2004-20240802-en
General
-
Target
6c2b21f0366b3942ae23d428155856a3deedccf6dcd00f3e27652a625455367d.exe
-
Size
13.9MB
-
MD5
38497df5caa858a3e65f3946bb0e28bf
-
SHA1
2446e498831b099bc15c37c295387e1c049fc702
-
SHA256
6c2b21f0366b3942ae23d428155856a3deedccf6dcd00f3e27652a625455367d
-
SHA512
a172f7b7b005a72069cab497a0b3dfb79badf1b899e990c959eb0b830db4a91250c137e8e5fdf74920ca59a2ede93de39a7f85b774fe7342c1f228ab4b15bf86
-
SSDEEP
12288:KzpKS0FRvqPKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKn:oMS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 6c2b21f0366b3942ae23d428155856a3deedccf6dcd00f3e27652a625455367d.exe
Files
-
6c2b21f0366b3942ae23d428155856a3deedccf6dcd00f3e27652a625455367d.exe.exe windows:5 windows x86 arch:x86
4d1592b546abd04edc20c63996cf71ca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
modemui
drvCommConfigDialogA
drvSetDefaultCommConfigA
CountryRunOnce
InvokeControlPanel
drvGetDefaultCommConfigA
cfgmgr32
CM_Add_Empty_Log_Conf
CM_Add_Range
CMP_Init_Detection
CM_Add_IDA
CMP_Report_LogOn
kernel32
OpenMutexW
FindClose
GetCurrentThreadId
LoadLibraryExW
SleepEx
GetShortPathNameW
HeapCreate
VirtualQueryEx
LoadLibraryA
CloseHandle
VirtualAlloc
SetSystemTime
GetACP
MapViewOfFile
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pdata Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.relos Size: 13.8MB - Virtual size: 2KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ