Static task
static1
Behavioral task
behavioral1
Sample
7zojnevwbwy2bt1n.exe
Resource
win10-20230220-en
General
-
Target
7zojnevwbwy2bt1n.exe
-
Size
14.1MB
-
MD5
c3ca591a26c481cbbda0bc9368f08779
-
SHA1
d70e957bdc10de43ca85cf1dc5f989754859cd92
-
SHA256
78ea841f3df133beb7f813caa7aad28bc54aade3bee2c3160af5b6038b9fdbe6
-
SHA512
f7469ac03d72f98fad4ac20d7088165ed4ce4ac4ab393aea494a3d86c0ee7f2ed904b959d4f0e349a96ad39abc89bb7508ea0f8abbcdd865b064b22c1ef77937
-
SSDEEP
393216:DYuajExuhKpTRiO0HSgGJli2lW1tPgkV1a:TjxucUtUotIk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7zojnevwbwy2bt1n.exe
Files
-
7zojnevwbwy2bt1n.exe.exe windows x64
1383c1bc876fd682b2d9326c68981a9b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ws2_32
socket
opengl32
glClearColor
kernel32
QueryPerformanceFrequency
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetWindowRect
gdi32
GetDeviceCaps
advapi32
CryptGenRandom
shell32
DragFinish
imm32
ImmSetCompositionWindow
Sections
\G].7K:i Size: - Virtual size: 918KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
k.$$eu<* Size: - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dsrbSQUp Size: - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4@GQKW`D Size: - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
3.f<jQ;Q Size: - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vidWmZ>X Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ZV#)c(:0 Size: - Virtual size: 9.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
dVvv/'b* Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wm&KY#Wa Size: 14.1MB - Virtual size: 14.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
aa.d:"1& Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
J7!SL0R: Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ