Static task
static1
Behavioral task
behavioral1
Sample
fd6c6b4b6844bbe94ba2ba5bb16e6df9749364832bf9f46c43d504deb1f0d0eaN.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fd6c6b4b6844bbe94ba2ba5bb16e6df9749364832bf9f46c43d504deb1f0d0eaN.exe
Resource
win10v2004-20240802-en
General
-
Target
fd6c6b4b6844bbe94ba2ba5bb16e6df9749364832bf9f46c43d504deb1f0d0eaN
-
Size
362KB
-
MD5
0beb52fcdc40a3625ae69c6a3d5e0350
-
SHA1
d5f222de874b922d736b7465d868719482d2c3b2
-
SHA256
fd6c6b4b6844bbe94ba2ba5bb16e6df9749364832bf9f46c43d504deb1f0d0ea
-
SHA512
8d7e9b2fb75f193e20356ab9afc08147eba9f5f7e9a1e076a42b517504d37af7112447e956385317d647d83379ec24db905ae790f70adad59e6cf9cab4268aa5
-
SSDEEP
6144:rKF9XLVe4ZKE3E/Cl5zfOlWN+MaOKqLYu4/c:rKrXLVeqKE3E/cJOlWWOx0u4U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd6c6b4b6844bbe94ba2ba5bb16e6df9749364832bf9f46c43d504deb1f0d0eaN
Files
-
fd6c6b4b6844bbe94ba2ba5bb16e6df9749364832bf9f46c43d504deb1f0d0eaN.exe windows:5 windows x86 arch:x86
9cf5a1d723063fc17f86324a8e158c45
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendMessageA
SetCapture
SetCursor
UpdateWindow
wvsprintfA
EndDeferWindowPos
ScrollWindow
DrawTextA
SetDlgItemTextA
PostQuitMessage
IsWindowEnabled
GetMenuState
GetSysColor
GetDlgItemTextA
ModifyMenuA
InvalidateRect
GetDlgItem
MessageBoxA
GetClientRect
GetFocus
GetDC
GetSystemMetrics
GetKeyState
GetWindowLongA
IsDlgButtonChecked
ReleaseCapture
ReleaseDC
BeginDeferWindowPos
CallNextHookEx
SetFocus
OemToCharA
CharUpperA
BeginPaint
CheckDlgButton
CharToOemA
CharLowerA
PostMessageA
ScreenToClient
EnumChildWindows
PtInRect
LoadBitmapA
GetCursorPos
LoadCursorA
LoadIconA
IsZoomed
GetActiveWindow
SetScrollPos
IsIconic
DefWindowProcA
GetMessageA
GetDesktopWindow
GetMenu
GetScrollPos
GetWindowDC
GetWindowRect
GetParent
DeferWindowPos
CreateWindowExA
DialogBoxParamA
DispatchMessageA
DestroyWindow
CreateDialogParamA
wsprintfA
WinHelpA
ShowWindow
SetScrollRange
TranslateAcceleratorA
TranslateMessage
SetWindowsHookExA
SetTimer
SetWindowLongA
SetWindowPos
EnableMenuItem
SendDlgItemMessageA
SetForegroundWindow
CheckMenuItem
shell32
DoEnvironmentSubstW
DragAcceptFiles
FindExecutableA
ExtractAssociatedIconA
DragQueryFileW
Shell_NotifyIconW
ExtractIconA
ShellExecuteW
ole32
OleRegGetMiscStatus
OleSetClipboard
CoDosDateTimeToFileTime
advapi32
AddAccessAllowedObjectAce
RegDeleteKeyA
GetSecurityDescriptorControl
AccessCheckByTypeResultListAndAuditAlarmA
GetAce
QueryServiceConfigA
GetTokenInformation
gdi32
AngleArc
ChoosePixelFormat
ColorMatchToTarget
CreateDCA
AnimatePalette
CreateColorSpaceA
CloseEnhMetaFile
AddFontMemResourceEx
CloseMetaFile
CreateBitmapIndirect
BitBlt
CreateDIBitmap
CombineRgn
dbghelp
SymGetTypeInfo
SymSetSearchPath
SymLoadModule
SymGetSymNext64
SymFromAddr
kernel32
MultiByteToWideChar
LCMapStringA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
LoadLibraryExA
GetTimeZoneInformation
GetOEMCP
GetACP
GetCPInfo
HeapAlloc
GetCurrentProcessId
QueryPerformanceCounter
HeapFree
HeapCreate
HeapDestroy
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
GetModuleHandleW
DeleteCriticalSection
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
OutputDebugStringA
LCMapStringW
GetSystemTimeAsFileTime
FindFirstFileExA
GlobalGetAtomNameW
SetThreadIdealProcessor
GetTempFileNameW
GetProcessAffinityMask
AreFileApisANSI
FindFirstChangeNotificationA
WaitForMultipleObjects
_lwrite
_llseek
_lclose
WritePrivateProfileStringA
WriteFile
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
TlsAlloc
Sleep
SetThreadPriority
SetHandleCount
SetFilePointer
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlUnwind
ReleaseMutex
RaiseException
OpenFile
MulDiv
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
VirtualProtect
GetSystemInfo
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetVersionExA
CloseHandle
LocalReAlloc
LocalAlloc
LoadLibraryA
LeaveCriticalSection
IsDBCSLeadByte
InitializeCriticalSection
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
Beep
CreateEventA
CreateMutexA
CreateThread
EnterCriticalSection
ExitProcess
ExitThread
FreeLibrary
GetCommandLineA
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStrings
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetStartupInfoA
GetStdHandle
GetTickCount
GetVersion
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
Sections
.text Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE