Static task
static1
Behavioral task
behavioral1
Sample
a7edb7ebc621a7706d12300f6e9681175b089fe663e7412d23f2f8e5c998249e.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a7edb7ebc621a7706d12300f6e9681175b089fe663e7412d23f2f8e5c998249e.exe
Resource
win10v2004-20230220-en
General
-
Target
a7edb7ebc621a7706d12300f6e9681175b089fe663e7412d23f2f8e5c998249e
-
Size
28KB
-
MD5
5e26afa7cbb89b0d7ac8443f87d37a4f
-
SHA1
35295fd40cf66e1bb0ac95f1fadff1b807a13ba1
-
SHA256
a7edb7ebc621a7706d12300f6e9681175b089fe663e7412d23f2f8e5c998249e
-
SHA512
d3e23638789ad76c8b983f100137128c578cf85466df57f800ea10aaf69868ad5bf438a5069c25cc000abcd9b44af796c1cba507e75e87d65b4691fb1ffa1a1a
-
SSDEEP
384:cyUlBovrXga95JN2ZA6HSSXj9yOd0lrW:cysobjnNi37RdCrW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7edb7ebc621a7706d12300f6e9681175b089fe663e7412d23f2f8e5c998249e
Files
-
a7edb7ebc621a7706d12300f6e9681175b089fe663e7412d23f2f8e5c998249e.exe windows x86
b73bde69c70072679dc4d91eaf3bca60
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
WideCharToMultiByte
LoadLibraryA
OutputDebugStringA
Sleep
GetProcAddress
WaitForSingleObject
OpenProcess
CreateThread
GetModuleHandleW
user32
LoadCursorW
LoadIconW
RegisterClassW
CreateWindowExW
GetWindowLongW
SetWindowLongW
ShowWindow
UpdateWindow
GetMessageW
TranslateMessage
DispatchMessageW
DestroyWindow
PostQuitMessage
DefWindowProcW
PostMessageW
mfc42u
ord823
ord540
ord2910
ord5568
ord5679
ord4124
ord858
ord800
ord535
ord825
msvcrt
_CxxThrowException
memmove
_exit
_XcptFilter
exit
__p___winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
??1type_info@@UAE@XZ
_controlfp
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
_wtoi
strncpy
_access
atoi
sprintf
wcslen
__CxxFrameHandler
??1exception@@UAE@XZ
msvcp60
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??0logic_error@std@@QAE@ABV01@@Z
??0out_of_range@std@@QAE@ABV01@@Z
??1out_of_range@std@@UAE@XZ
??_7out_of_range@std@@6B@
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 712B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ