Static task
static1
Behavioral task
behavioral1
Sample
6bda93b27e68fd666782c878a6448b0d4c33025734f8be8e58a8aa67bdc43ed3.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6bda93b27e68fd666782c878a6448b0d4c33025734f8be8e58a8aa67bdc43ed3.exe
Resource
win10v2004-20240802-en
General
-
Target
6bda93b27e68fd666782c878a6448b0d4c33025734f8be8e58a8aa67bdc43ed3
-
Size
6.0MB
-
MD5
06f218c0b0461d2e6c13f95a73ff9b67
-
SHA1
5d40fcbdc4b5be3d7eb4dd2e3c2ca1a8781fd7c5
-
SHA256
6bda93b27e68fd666782c878a6448b0d4c33025734f8be8e58a8aa67bdc43ed3
-
SHA512
5dac9d91651198b4d18c1fdc627486e0b2a2afc15e8bab242d033c250997bebc9329fad6b3d350d8c0819fce6c05c26625515e9bde6e49dddc03ff9d0f8bd05d
-
SSDEEP
196608:CEB0LRbYPhbnsNqH23elckB96DmOW6LW9Tou:bB0LR8xnIqH2M5B96KxyWZou
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6bda93b27e68fd666782c878a6448b0d4c33025734f8be8e58a8aa67bdc43ed3
Files
-
6bda93b27e68fd666782c878a6448b0d4c33025734f8be8e58a8aa67bdc43ed3.exe windows:6 windows x64 arch:x64
c59924b1437a8ba8d72297a76e77f019
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetVolumeInformationW
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
ResetEvent
CreateThread
SetEvent
CreateEventW
GetQueuedCompletionStatus
SetThreadPriority
VirtualQuery
CopyFileW
CreateProcessW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetSystemInfo
GlobalFlags
GetFileAttributesExW
GetSystemDirectoryW
GetVersionExW
GetFileAttributesW
WaitForSingleObject
FindClose
PeekNamedPipe
GetModuleFileNameW
TerminateProcess
FindNextFileW
GetCommandLineW
SetLastError
FindFirstFileW
SetFilePointerEx
Sleep
CreateFileW
LockFile
WriteFile
ReadFile
FreeLibrary
GetUserDefaultLCID
FreeResource
GetCurrentThreadId
GlobalReAlloc
MulDiv
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GlobalSize
IsDebuggerPresent
SetFilePointer
GetTickCount
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteFileW
ExitProcess
TryEnterCriticalSection
GetCurrentThread
CloseHandle
SetWaitableTimer
CreateWaitableTimerW
GetCurrentProcess
GetCurrentProcessId
GetProcAddress
LoadLibraryW
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindFirstFileExW
GetTimeZoneInformation
EnumSystemLocalesW
IsValidLocale
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetConsoleOutputCP
SetStdHandle
HeapQueryInformation
GetFileInformationByHandle
SetConsoleCtrlHandler
FreeLibraryAndExitThread
ExitThread
GetCommandLineA
RtlPcToFileHeader
RtlUnwindEx
GetCPInfo
GetStringTypeW
LCMapStringEx
GetModuleHandleW
MultiByteToWideChar
WideCharToMultiByte
InitializeCriticalSection
GetProcessHeap
DeleteCriticalSection
OutputDebugStringW
GetStartupInfoW
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetTempFileNameW
GetWindowsDirectoryW
SetErrorMode
GetFileTime
SystemTimeToTzSpecificLocalTime
GetProfileIntW
GetTempPathW
SearchPathW
HeapDestroy
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
DuplicateHandle
UnlockFile
SetEndOfFile
GetFullPathNameW
FlushFileBuffers
VerifyVersionInfoW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalGetAtomNameW
lstrcpyW
GetThreadLocale
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CompareStringA
lstrcmpA
LocalFree
CompareStringW
LeaveCriticalSection
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleExW
EncodePointer
OutputDebugStringA
GetFileSizeEx
CreateFileA
VerifyVersionInfoA
VerSetConditionMask
FormatMessageW
GetEnvironmentVariableA
WaitForSingleObjectEx
MoveFileExA
GetModuleHandleA
QueryPerformanceFrequency
SleepEx
SystemTimeToFileTime
GetSystemTime
ReadConsoleW
ReadConsoleA
SetConsoleMode
GetConsoleMode
QueryPerformanceCounter
FormatMessageA
LoadLibraryA
GetSystemDirectoryA
GetFileType
GetStdHandle
GetACP
GetEnvironmentVariableW
lstrcmpiW
ResumeThread
InitializeCriticalSectionEx
UnmapViewOfFile
SwitchToThread
WaitForMultipleObjects
CreateIoCompletionPort
lstrlenW
MapViewOfFileEx
CreateFileMappingW
GetFileSize
GetNativeSystemInfo
VirtualFree
VirtualProtect
VirtualAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockShared
ReleaseSRWLockExclusive
FindResourceExW
InitializeSRWLock
PostQueuedCompletionStatus
GetDriveTypeW
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
HeapFree
RtlUnwind
GetSystemTimeAsFileTime
CreateEventA
GetModuleHandleA
TerminateProcess
GetCurrentProcess
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
GetCurrentThreadId
OpenThread
Thread32Next
CloseHandle
SuspendThread
ResumeThread
WriteProcessMemory
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThread
SetThreadAffinityMask
Sleep
LoadLibraryA
FreeLibrary
GetTickCount
SystemTimeToFileTime
FileTimeToSystemTime
GlobalFree
HeapAlloc
HeapFree
GetProcAddress
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
MultiByteToWideChar
GetModuleHandleW
LoadResource
FindResourceExW
FindResourceExA
WideCharToMultiByte
GetThreadLocale
GetUserDefaultLCID
GetSystemDefaultLCID
EnumResourceNamesA
EnumResourceNamesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
EnumResourceTypesW
CreateFileW
LoadLibraryW
GetLastError
FlushFileBuffers
FlsSetValue
GetCommandLineA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RaiseException
RtlPcToFileHeader
RtlUnwindEx
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapSetInformation
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
WriteFile
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapReAlloc
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
user32
GetDesktopWindow
LoadCursorW
LoadIconW
SetPropW
RegisterClassW
SetTimer
GetClassInfoW
GetActiveWindow
LoadStringW
GetWindowLongPtrW
RemovePropW
CreateWindowExW
GetPropW
DestroyWindow
PostMessageW
DefWindowProcW
CopyImage
SetForegroundWindow
EnumDisplaySettingsW
SetClipboardData
MoveWindow
EmptyClipboard
CloseClipboard
GetMonitorInfoW
OpenClipboard
WaitForInputIdle
SetActiveWindow
MonitorFromWindow
CreateMenu
LoadImageW
AppendMenuW
CheckMenuItem
InsertMenuW
TranslateAcceleratorW
DestroyMenu
CreateAcceleratorTableW
DestroyAcceleratorTable
GetSubMenu
TrackPopupMenu
CreatePopupMenu
DeleteMenu
GetMenuItemCount
GetMenu
ModifyMenuW
wsprintfW
IsWindow
GetNextDlgTabItem
DrawFocusRect
FrameRect
DrawStateW
ClientToScreen
CopyRect
OffsetRect
WindowFromPoint
FillRect
GetParent
GetWindowRect
GetSysColor
InvalidateRect
EnableWindow
SendMessageW
EnumWindows
GetDC
GetSystemMetrics
GetWindowDC
GetClientRect
ReleaseDC
GetCursorPos
AdjustWindowRectEx
ShowWindow
GetWindow
SetCursor
EnableMenuItem
GetAncestor
SetWindowTextW
GetWindowThreadProcessId
GetShellWindow
MsgWaitForMultipleObjects
DispatchMessageW
TranslateMessage
InflateRect
GetWindowLongW
IsIconic
ReleaseCapture
UpdateWindow
PtInRect
SetScrollPos
KillTimer
SetScrollRange
GetProcessWindowStation
GetUserObjectInformationW
RegisterWindowMessageW
GetMessagePos
GetMessageTime
GetClassInfoExW
IsMenu
GetWindowPlacement
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgItem
GetMenuItemID
GetForegroundWindow
BeginPaint
EndPaint
ValidateRect
ScrollWindow
ShowScrollBar
GetWindowTextW
GetWindowTextLengthW
MapWindowPoints
EqualRect
GetClassLongPtrW
GetLastActivePopup
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
SetScrollInfo
GetScrollInfo
GetMenuStringW
GetMenuState
RemoveMenu
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
CheckDlgButton
IsDialogMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadMenuW
GetKeyNameTextW
MapVirtualKeyW
SystemParametersInfoW
RegisterClipboardFormatW
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
ShowOwnedPopups
CharNextW
CreateDialogIndirectParamW
EndDialog
NotifyWinEvent
SendDlgItemMessageA
SetRectEmpty
GetMenuItemInfoW
MonitorFromPoint
GetSysColorBrush
RealChildWindowFromPoint
GetAsyncKeyState
BringWindowToTop
LoadAcceleratorsW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
SetLayeredWindowAttributes
EnumDisplayMonitors
TrackMouseEvent
CharUpperW
PostThreadMessageW
WaitMessage
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CopyAcceleratorTableW
EnumChildWindows
LockWindowUpdate
SetClassLongPtrW
InvalidateRgn
GetNextDlgGroupItem
DrawEdge
DrawFrameControl
DrawIconEx
UnionRect
SetCapture
SetCursorPos
CharUpperBuffW
UpdateLayeredWindow
GetIconInfo
GetMenuDefaultItem
SetMenuDefaultItem
CopyIcon
IsClipboardFormatAvailable
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsCharLowerW
MapVirtualKeyExW
SubtractRect
GetUpdateRect
HideCaret
InvertRect
GetDoubleClickTime
DestroyCursor
GetComboBoxInfo
GetWindowRgn
SetParent
GetKeyState
GetMessageW
PeekMessageW
MessageBoxW
UnregisterClassW
EnableScrollBar
GetClassNameW
DestroyIcon
SetWindowLongW
IsZoomed
SetRect
GetSystemMenu
CallWindowProcW
GetFocus
IsWindowVisible
SetWindowPos
SetWindowLongPtrW
SetWindowRgn
ScreenToClient
MessageBeep
GetScrollPos
DrawIcon
GetCapture
RedrawWindow
GetScrollRange
GetDlgCtrlID
IsChild
GetTopWindow
IsWindowEnabled
SetMenu
WinHelpW
LoadBitmapW
IsRectEmpty
IntersectRect
SetFocus
gdi32
SetDIBColorTable
CreateCompatibleDC
GdiAlphaBlend
SetROP2
SelectObject
GetStockObject
GetDIBits
GetDeviceCaps
GetSystemPaletteEntries
SelectPalette
CreatePalette
GetObjectW
SetStretchBltMode
CreateFontIndirectW
DeleteObject
DeleteDC
GetObjectType
GetViewportExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SetBkMode
CreateCompatibleBitmap
BitBlt
GetTextExtentPoint32W
RoundRect
CreateBitmap
SetBkColor
CreatePen
SetTextColor
GetPixel
StretchBlt
CreateEllipticRgn
CreateSolidBrush
Ellipse
Rectangle
GetTextMetricsW
CreateRoundRectRgn
PatBlt
GetViewportOrgEx
CombineRgn
CreateRectRgn
CreatePatternBrush
GetWindowOrgEx
CreateHatchBrush
SetPixel
GetWindowExtEx
SetPolyFillMode
GetClipBox
ExcludeClipRect
Escape
CreateDCW
CopyMetaFileW
CreateDIBSection
GetLayout
SetLayout
RealizePalette
SetPixelV
GetTextFaceW
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
SetPaletteEntries
ExtFloodFill
LPtoDP
GetPaletteEntries
GetNearestPaletteIndex
EnumFontFamiliesExW
Polyline
Polygon
CreatePolygonRgn
OffsetRgn
GetRgnBox
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
GetTextColor
GetBkColor
DPtoLP
SetRectRgn
GetMapMode
CreateRectRgnIndirect
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
SetTextAlign
SetMapMode
advapi32
CryptAcquireContextW
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
RegEnumValueW
RegEnumKeyExW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
CryptEncrypt
CryptImportKey
CryptHashData
CryptGenRandom
CryptGetHashParam
CryptAcquireContextA
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptCreateHash
CryptDestroyHash
CryptSignHashW
ReportEventW
RegCloseKey
RegQueryValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
CryptEnumProvidersW
DeregisterEventSource
RegisterEventSourceW
shell32
SHAppBarMessage
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
SHGetFileInfoW
Shell_NotifyIconW
ShellExecuteW
DragFinish
DragQueryFileW
ole32
OleIsCurrentClipboard
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
DoDragDrop
OleGetClipboard
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoCreateInstance
CoInitializeEx
CreateStreamOnHGlobal
OleFlushClipboard
CoUninitialize
CoRevokeClassObject
CoGetClassObject
CoDisconnectObject
CoCreateGuid
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
ReleaseStgMedium
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
OleRun
CLSIDFromString
CoInitialize
OleDuplicateData
oleaut32
SafeArrayGetElemsize
SystemTimeToVariantTime
VariantTimeToSystemTime
LHashValOfNameSys
VariantClear
VariantChangeType
SafeArrayAccessData
VarCmp
SafeArrayCreate
SafeArrayUnaccessData
VarBstrFromDate
SafeArrayDestroy
SysStringLen
SysAllocStringLen
SafeArrayGetDim
VariantInit
SafeArrayGetUBound
LoadTypeLi
SafeArrayGetLBound
VariantCopyInd
SysFreeString
OleCreateFontIndirect
RegisterTypeLi
SysAllocString
VariantCopy
comctl32
ImageList_Create
ImageList_Destroy
_TrackMouseEvent
InitCommonControlsEx
ImageList_AddMasked
ws2_32
WSAStringToAddressW
getaddrinfo
freeaddrinfo
InetNtopW
WSAGetOverlappedResult
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAResetEvent
WSASend
gethostbyaddr
getservbyport
WSARecv
WSAIoctl
WSASetLastError
shutdown
getservbyname
WSAStartup
connect
inet_ntoa
recvfrom
ntohl
getsockopt
getsockname
__WSAFDIsSet
WSAGetLastError
ntohs
accept
bind
closesocket
gethostbyname
select
listen
getpeername
inet_addr
send
socket
inet_pton
gethostname
WSACleanup
WSAWaitForMultipleEvents
recv
htonl
htons
sendto
ioctlsocket
setsockopt
crypt32
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore
CryptStringToBinaryA
CryptDecodeObjectEx
CertAddCertificateContextToStore
CertFindExtension
CertGetNameStringA
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
PFXImportCertStore
wldap32
ord33
ord32
ord27
ord26
ord22
ord79
ord45
ord60
ord211
ord46
ord143
ord35
ord30
ord200
ord301
ord41
ord50
msimg32
TransparentBlt
AlphaBlend
shlwapi
StrFormatKBSizeW
PathRemoveFileSpecW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
StrChrW
uxtheme
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
GetCurrentThemeName
GetThemeColor
DrawThemeParentBackground
DrawThemeText
GetWindowTheme
IsAppThemed
oledlg
OleUIBusyW
gdiplus
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdiplusStartup
GdipGetImageHeight
GdipGetImagePaletteSize
GdipCloneImage
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipAlloc
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDisposeImage
GdipGetImagePixelFormat
GdipFree
GdipBitmapLockBits
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipGetImagePalette
GdipSetCompositingMode
GdipGetImageWidth
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdiplusShutdown
winmm
timeEndPeriod
timeGetDevCaps
timeGetTime
PlaySoundW
timeBeginPeriod
bcrypt
BCryptGenRandom
oleacc
CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
Sections
.text Size: - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 238KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.QFp Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.J[X Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yS( Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 171KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ