Static task
static1
Behavioral task
behavioral1
Sample
f6a9551674745d91dffb5942e045fc2f5bf5a52458bc62dfdf04c2b6786cc0a9.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f6a9551674745d91dffb5942e045fc2f5bf5a52458bc62dfdf04c2b6786cc0a9.exe
Resource
win10v2004-20241007-en
General
-
Target
f6a9551674745d91dffb5942e045fc2f5bf5a52458bc62dfdf04c2b6786cc0a9
-
Size
1.4MB
-
MD5
0911f2498d9b33661788bfbb507ac88b
-
SHA1
8fec35906aacc6e0010a9c612a8e6e37cc6beac7
-
SHA256
f6a9551674745d91dffb5942e045fc2f5bf5a52458bc62dfdf04c2b6786cc0a9
-
SHA512
3a82847ee4e59efd0f45d7557288681e049e3bea25572841a47b3c6bcf27a8d91787d80c86807db3386fe6716e35cfef5e87f108a4562f03605faff9246acce8
-
SSDEEP
24576:Sg4y8KIbZyqENKqAZuiVnK35A13e3cc6Atetql2T1x50MeUMpaf:xXrNO91KWTym1xSvpk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6a9551674745d91dffb5942e045fc2f5bf5a52458bc62dfdf04c2b6786cc0a9
Files
-
f6a9551674745d91dffb5942e045fc2f5bf5a52458bc62dfdf04c2b6786cc0a9.exe windows:4 windows x86 arch:x86
8bf5647ac17d048301a655b90d75b33b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
VirtualFree
VirtualProtect
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryA
CreateFileA
CreateFileW
WriteFile
CloseHandle
GetLocalTime
VirtualQuery
CreateFileMappingW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
FlushInstructionCache
GetSystemInfo
VirtualProtectEx
user32
wsprintfA
shlwapi
ord158
msvbvm60
__vbaVarSub
Sections
.text Size: - Virtual size: 6.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 216KB - Virtual size: 215KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ