Static task
static1
Behavioral task
behavioral1
Sample
d6bc7e1a8b5256f7d2c5d3d344b3bc7f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d6bc7e1a8b5256f7d2c5d3d344b3bc7f.exe
Resource
win10v2004-20241007-en
General
-
Target
d6bc7e1a8b5256f7d2c5d3d344b3bc7f.exe
-
Size
457KB
-
MD5
d6bc7e1a8b5256f7d2c5d3d344b3bc7f
-
SHA1
b27a8deb3c6a5373c80b210f318fa2521a6840f8
-
SHA256
d134bebdf067cc8f99dac75e8b1c22c0f032d29c0baab49d0f8a4eef5304c5d0
-
SHA512
57d82526bc1603760a5c8843df8835f3493006f9a9eabc687ba1fbf190c3ebd48c08eac5d7fc0d0857cde266059a5c87fb0968b33e730a553b34fe8582cee908
-
SSDEEP
6144:JIYGxzaff+ssRhLRCS0LTHhmd0ButsqpSrG/OHgLBs1891H71WeTTz3:t9evvJETBUYutxc6/WgG18v1W2f3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6bc7e1a8b5256f7d2c5d3d344b3bc7f.exe
Files
-
d6bc7e1a8b5256f7d2c5d3d344b3bc7f.exe.exe windows:5 windows x86 arch:x86
2f55e27b71ad52ab5e8947ebd770f2c7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
GetLogicalDriveStringsW
SetEnvironmentVariableW
SetVolumeMountPointW
GetTimeFormatA
GetTickCount
CreateNamedPipeW
LocalFlags
GetNumberFormatA
ClearCommBreak
GetConsoleAliasExesW
GetEnvironmentStrings
SetFileShortNameW
LoadLibraryW
_hread
GetCalendarInfoA
SetVolumeMountPointA
GetVersionExW
EnumSystemCodePagesA
CreateSemaphoreA
GetFileAttributesW
CreateProcessA
GetModuleFileNameW
CreateActCtxA
CreateJobObjectA
VerifyVersionInfoW
InterlockedExchange
EnumCalendarInfoW
GetLastError
GetCurrentDirectoryW
GetProcAddress
CopyFileA
SetComputerNameA
SetFileAttributesA
DefineDosDeviceA
GlobalFree
FindClose
LoadLibraryA
LocalAlloc
CreateHardLinkW
GetNumberFormatW
OpenEventA
FoldStringW
SetEnvironmentVariableA
GlobalWire
GetModuleFileNameA
EnumDateFormatsA
GetShortPathNameW
GetDiskFreeSpaceExA
ReadConsoleInputW
GetCurrentProcessId
DebugBreak
GetTempPathA
TlsFree
LCMapStringW
InterlockedIncrement
CommConfigDialogA
GetLocaleInfoA
EnumCalendarInfoA
SetFilePointer
GetStdHandle
GetComputerNameA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CloseHandle
FlushFileBuffers
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
HeapAlloc
GetStartupInfoW
RtlUnwind
RaiseException
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
GetCPInfo
HeapCreate
VirtualFree
VirtualAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
SetLastError
GetCurrentThreadId
HeapSize
ExitProcess
WriteFile
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetLocaleInfoW
GetModuleHandleA
GetConsoleCP
GetConsoleMode
gdi32
CreateDCW
CreateCompatibleBitmap
GetCharWidth32A
GetCharWidthI
advapi32
ReadEventLogW
ole32
CoSuspendClassObjects
winhttp
WinHttpOpen
WinHttpCheckPlatform
msimg32
AlphaBlend
Sections
.text Size: 325KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fohab Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zod Size: 512B - Virtual size: 214B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ