Static task
static1
Behavioral task
behavioral1
Sample
b6d6bcf644cba5e0501825e1693a41c1a7589b1885e6b5249469d787d90cf550.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
b6d6bcf644cba5e0501825e1693a41c1a7589b1885e6b5249469d787d90cf550.exe
Resource
win10v2004-20241007-en
General
-
Target
b6d6bcf644cba5e0501825e1693a41c1a7589b1885e6b5249469d787d90cf550
-
Size
358KB
-
MD5
fd3e76a9ee1eb5acc1c8e18d473377fb
-
SHA1
c6da1d47d2dddd6c220427ef29e5cdbd1d568014
-
SHA256
b6d6bcf644cba5e0501825e1693a41c1a7589b1885e6b5249469d787d90cf550
-
SHA512
1eade06f6a34d8885221780a7ef4196864acf6d79ed63d28f506c7570096bc3bdd45b21d3b09c729c30fa092231d82bfdc39a45c254519effbd00fb7129ea7f5
-
SSDEEP
6144:d3jStS8NSSwMnOV5UsFkEtaBAxHh0HmPDqGab6igbC4JD:dSo8NSPMnM5UjNBAD0Gb9amiaD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6d6bcf644cba5e0501825e1693a41c1a7589b1885e6b5249469d787d90cf550
Files
-
b6d6bcf644cba5e0501825e1693a41c1a7589b1885e6b5249469d787d90cf550.exe windows:5 windows x86 arch:x86
1da652280d0e88580dfac17c8bc7ccb0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileSectionNamesW
SetDefaultCommConfigA
CreateMutexW
EnumCalendarInfoA
GetStringTypeA
GlobalCompact
_llseek
VerSetConditionMask
GetConsoleAliasA
WritePrivateProfileSectionA
WriteConsoleInputA
BackupSeek
GetModuleHandleW
EnumCalendarInfoExW
EnumTimeFormatsA
GlobalAlloc
LoadLibraryW
TerminateThread
ReadConsoleInputA
GetSystemWindowsDirectoryA
GetFileAttributesA
TransactNamedPipe
IsDBCSLeadByte
lstrcmpW
GlobalUnlock
DeactivateActCtx
FindFirstFileA
SetLastError
GetProcAddress
GetFirmwareEnvironmentVariableW
EnterCriticalSection
GlobalGetAtomNameA
SearchPathA
ResetEvent
OpenWaitableTimerA
GetProcessId
LocalAlloc
SetCalendarInfoW
BuildCommDCBAndTimeoutsW
SetCurrentDirectoryW
AddAtomA
WaitForMultipleObjects
EnumResourceTypesW
FindNextFileA
FindFirstVolumeMountPointA
FreeEnvironmentStringsW
GetCPInfoExA
DeleteFileW
CopyFileExA
CloseHandle
WriteConsoleW
GetLastError
WideCharToMultiByte
HeapAlloc
DeleteFileA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetCurrentThreadId
GetCurrentThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
HeapDestroy
LeaveCriticalSection
SetFilePointer
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
GetModuleFileNameA
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
MultiByteToWideChar
GetStringTypeW
FatalAppExitA
HeapFree
Sleep
IsProcessorFeaturePresent
GetLocaleInfoW
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
RtlUnwind
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
HeapSize
CreateFileW
user32
LoadMenuW
Sections
.text Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 185KB - Virtual size: 686KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ