Static task
static1
Behavioral task
behavioral1
Sample
b6a2bd2c419ce4ec99e5736c4f7a6f6e408b849ca127a3afce7a098e816668e5N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b6a2bd2c419ce4ec99e5736c4f7a6f6e408b849ca127a3afce7a098e816668e5N.exe
Resource
win10v2004-20240802-en
General
-
Target
b6a2bd2c419ce4ec99e5736c4f7a6f6e408b849ca127a3afce7a098e816668e5N
-
Size
376KB
-
MD5
f4a5e6c75826aaad775987cfaf2f72a0
-
SHA1
58e2bc705dfa81288e3864ad363590c6287f3c7f
-
SHA256
b6a2bd2c419ce4ec99e5736c4f7a6f6e408b849ca127a3afce7a098e816668e5
-
SHA512
2b12549f0344578fbd526baeb448c8d1147a635fa86e7e3a04a7ab44bf6ee6894ebc122aede3b3191f8cfcf348774364cfd0baea5c7cd5ff135c490debb7c578
-
SSDEEP
6144:rMR2JpitKSHIdY1KBnOjyFiCD6YSVAZf6a4tVIwYjg/1ev7a3xbR1wcoP/6EIO:rmYpitlIdYwOmFiCD6Puf6a4tSQFhbDU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6a2bd2c419ce4ec99e5736c4f7a6f6e408b849ca127a3afce7a098e816668e5N
Files
-
b6a2bd2c419ce4ec99e5736c4f7a6f6e408b849ca127a3afce7a098e816668e5N.exe windows:4 windows x86 arch:x86
5e2b2b2266e834952c0b059fb6c083c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
GlobalFree
GlobalAlloc
GetCurrentProcess
TerminateProcess
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InterlockedExchange
InterlockedCompareExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
GetCommandLineA
GetCPInfo
VirtualProtect
MultiByteToWideChar
GetSystemInfo
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetVersionExA
VirtualQuery
ExitProcess
GetProcAddress
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LoadLibraryA
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
HeapSize
LCMapStringA
user32
CharUpperBuffA
wsprintfA
SetWindowLongW
advapi32
RegDeleteKeyA
RegCreateKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegDeleteKeyW
RegSetValueExA
ole32
CoGetClassObject
Sections
.text Size: 348KB - Virtual size: 347KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 299KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ