Static task
static1
Behavioral task
behavioral1
Sample
6bfff4412fcb97df9d2a431f513eca541576330aed2859ecba479daa8831e47e.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6bfff4412fcb97df9d2a431f513eca541576330aed2859ecba479daa8831e47e.exe
Resource
win10v2004-20241007-en
General
-
Target
6bfff4412fcb97df9d2a431f513eca541576330aed2859ecba479daa8831e47e.exe
-
Size
455KB
-
MD5
75c689774e5b58a3c4ced392928b6053
-
SHA1
6df791246e3cf66eaca12d98c0d92a686423316f
-
SHA256
6bfff4412fcb97df9d2a431f513eca541576330aed2859ecba479daa8831e47e
-
SHA512
6d3bc7eb3822c2f722e5878e79b0484d2001dcaa2badd114143a5e13bb8017af2360e52c0e8accbc81bdf1d3d966434c46b832edce69de1d3bbc7c99fc1be9bd
-
SSDEEP
6144:CD+iX4dXR1M2Wg6TiJrUU5HNJU1oP6lG8iOaT+y6BbOkT0:YF8W2uOUObylG8ouNOM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6bfff4412fcb97df9d2a431f513eca541576330aed2859ecba479daa8831e47e.exe
Files
-
6bfff4412fcb97df9d2a431f513eca541576330aed2859ecba479daa8831e47e.exe.exe windows:5 windows x86 arch:x86
b9e90b72c18cbd740db39440a20246de
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CommConfigDialogA
InterlockedIncrement
EnumCalendarInfoW
InterlockedDecrement
SetEnvironmentVariableW
QueryDosDeviceA
SetVolumeMountPointW
GetComputerNameW
GetTimeFormatA
GetTickCount
CreateNamedPipeW
LocalFlags
GetNumberFormatA
ClearCommBreak
TlsSetValue
GetEnvironmentStrings
SetFileShortNameW
LoadLibraryW
CopyFileW
_hread
GetCalendarInfoA
SetVolumeMountPointA
GetVersionExW
GetFileAttributesA
CreateProcessA
GetModuleFileNameW
CreateActCtxA
GetEnvironmentVariableA
GetShortPathNameA
CreateJobObjectA
GetConsoleAliasExesA
InterlockedExchange
GetStdHandle
GetLogicalDriveStringsA
GetLastError
GetCurrentDirectoryW
GetProcAddress
EnumSystemCodePagesW
SetComputerNameA
SetFileAttributesA
GlobalFree
LoadLibraryA
LocalAlloc
CreateHardLinkW
GetNumberFormatW
CreateEventW
OpenEventA
FoldStringW
GlobalWire
EnumDateFormatsW
GetFileTime
WaitForDebugEvent
GetShortPathNameW
GetDiskFreeSpaceExA
GetCurrentProcessId
GetTempPathA
LCMapStringW
WriteConsoleW
ReadFile
GetLocaleInfoA
EnumCalendarInfoA
SetFilePointer
WriteConsoleInputW
VerifyVersionInfoW
GetProcessHeap
SetEndOfFile
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
CreateFileA
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapReAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
RaiseException
RtlUnwind
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
GetCPInfo
IsProcessorFeaturePresent
HeapCreate
HeapSize
GetModuleHandleW
ExitProcess
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
SetHandleCount
GetFileType
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsFree
SetLastError
GetCurrentThreadId
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetLocaleInfoW
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
CloseHandle
CreateFileW
user32
GetMenuInfo
gdi32
CreateDCW
GetCharWidthI
CreateDCA
GetCharWidth32A
ole32
StringFromIID
CoSuspendClassObjects
CoRegisterPSClsid
winhttp
WinHttpOpen
WinHttpCheckPlatform
Sections
.text Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vuri Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gocezi Size: 512B - Virtual size: 214B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xolu Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ