Static task
static1
Behavioral task
behavioral1
Sample
6ef2b3c6337213f32c389dc766ce2b07c460d305a6b24a7e9c032f1ff25c0919.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6ef2b3c6337213f32c389dc766ce2b07c460d305a6b24a7e9c032f1ff25c0919.exe
Resource
win10v2004-20241007-en
General
-
Target
6ef2b3c6337213f32c389dc766ce2b07c460d305a6b24a7e9c032f1ff25c0919
-
Size
77KB
-
MD5
21d7dcc9250501522d177eab4ae8b444
-
SHA1
dab837aa439852404571c4650927868e88790e4a
-
SHA256
6ef2b3c6337213f32c389dc766ce2b07c460d305a6b24a7e9c032f1ff25c0919
-
SHA512
5d26820942c4fe804de33509a6530e4342a38f3a7df6f3b57a6154bb1c168e1e5feb2bc71a41b03f64ac8905e7ae61fac67093270e17594e9f2d8b705eeaf30d
-
SSDEEP
1536:LfJcJvwNkXhSPFKS2qa5k7kjMnV5PlkwWfZOP4tWx:Lf8gx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ef2b3c6337213f32c389dc766ce2b07c460d305a6b24a7e9c032f1ff25c0919
Files
-
6ef2b3c6337213f32c389dc766ce2b07c460d305a6b24a7e9c032f1ff25c0919.exe windows:4 windows x86 arch:x86
f29ad39ea253f11530250e0ba5fb21f1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB Paths
Imports
comctl32
InitCommonControls
comdlg32
GetFileTitleW
GetOpenFileNameW
gdi32
GetDeviceCaps
GetEnhMetaFileW
GetMetaFileW
PlayEnhMetaFile
PlayMetaFile
SetMapMode
SetMetaFileBitsEx
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
kernel32
CloseHandle
CreateFileW
GetCommandLineW
GetModuleHandleW
GetStartupInfoW
GlobalAlloc
GlobalFree
ReadFile
SetFilePointer
ucrtbase
__p___argc
__p___wargv
__stdio_common_vsprintf
__stdio_common_vswprintf
_configure_wide_argv
_get_initial_wide_environment
_initialize_wide_environment
_set_app_type
exit
user32
BeginPaint
CreateWindowExW
DefWindowProcW
DestroyWindow
DispatchMessageW
EndPaint
GetClientRect
GetDC
GetMessageW
InvalidateRect
LoadCursorW
LoadStringW
MessageBoxA
PostQuitMessage
RegisterClassExW
ReleaseDC
SetWindowTextW
ShowWindow
TranslateMessage
UpdateWindow
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rodata Size: 4KB - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.buildid Size: 4KB - Virtual size: 53B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 4KB - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 4KB - Virtual size: 49B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ