Static task
static1
Behavioral task
behavioral1
Sample
f6b2875b5e62b14b0ffff49fea94a48f2f9de25161ce6fbd124805b0ba1ade99N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f6b2875b5e62b14b0ffff49fea94a48f2f9de25161ce6fbd124805b0ba1ade99N.exe
Resource
win10v2004-20240802-en
General
-
Target
f6b2875b5e62b14b0ffff49fea94a48f2f9de25161ce6fbd124805b0ba1ade99N
-
Size
7.4MB
-
MD5
9db9d59af8771023500fa08df0c640c0
-
SHA1
ce921f96df7814be2ce7e7f7fcb3667cc810b034
-
SHA256
f6b2875b5e62b14b0ffff49fea94a48f2f9de25161ce6fbd124805b0ba1ade99
-
SHA512
dc0ab7ad28a738582b4ef6c23dcbbd397b7e3d3db5f39084a6bdde63977604cf5a0c0ae29837fa13fa84c6c4928945c6eb1e575b38ee089c342a99a2c907fccf
-
SSDEEP
196608:WR0/y4AiFMvN3JBIfoM7Blxewk2wHMpbz:vbiZCfoM7B/O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6b2875b5e62b14b0ffff49fea94a48f2f9de25161ce6fbd124805b0ba1ade99N
Files
-
f6b2875b5e62b14b0ffff49fea94a48f2f9de25161ce6fbd124805b0ba1ade99N.exe windows:6 windows x86 arch:x86
5ace39580176fb10bb5349595fb39750
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ClientToScreen
CharUpperBuffW
kernel32
AcquireSRWLockExclusive
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
advapi32
AdjustTokenPrivileges
shell32
CommandLineToArgvW
imm32
ImmGetContext
d3d9
Direct3DCreate9
d3dx9_43
D3DXCreateTextureFromFileInMemoryEx
ws2_32
WSACleanup
crypt32
CertAddCertificateContextToStore
wldap32
ord301
normaliz
IdnToAscii
Sections
.text Size: 742KB - Virtual size: 742KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 644KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 50KB - Virtual size: 28.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00cfg Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.voltbl Size: 512B - Virtual size: 318B
.UVd0 Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UVd1 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UVd2 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 265KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ