Static task
static1
Behavioral task
behavioral1
Sample
7fd511880dc185e55ff9970596b15a9b3e1c55791da3214d61a2621718345a64.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
7fd511880dc185e55ff9970596b15a9b3e1c55791da3214d61a2621718345a64.exe
Resource
win10v2004-20230220-en
General
-
Target
7fd511880dc185e55ff9970596b15a9b3e1c55791da3214d61a2621718345a64
-
Size
180KB
-
MD5
78fe72cfc687acbf6d05459bc0e462e2
-
SHA1
b2182924d29a07de779662b2e0191243132d43b4
-
SHA256
7fd511880dc185e55ff9970596b15a9b3e1c55791da3214d61a2621718345a64
-
SHA512
19d98e2a2ce7b2ede59881feaa2683dbca0494defb4c9dac38a327e43f4dc6c0838ff5e877d6245d8227e2f01936d66be1d6779a5c366bf64125003899e99b3a
-
SSDEEP
768:LhbAiMh9mXpv/O9ksueah4yy+T3BjSOBd:LiSG97HC/TT3Bl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7fd511880dc185e55ff9970596b15a9b3e1c55791da3214d61a2621718345a64
Files
-
7fd511880dc185e55ff9970596b15a9b3e1c55791da3214d61a2621718345a64.exe windows x86
3ab3bde1dc073c54ceec033710574d06
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
CreateFileA
Sleep
ReadFile
PurgeComm
SetCommTimeouts
SetCommState
CloseHandle
GetLocalTime
SizeofResource
LoadResource
FindResourceA
GetModuleFileNameA
CreateThread
GetStartupInfoA
GetModuleHandleA
GetCommState
OutputDebugStringA
user32
LoadIconA
IsDlgButtonChecked
SetDlgItemTextA
EnableWindow
GetDlgItem
PostMessageA
SendDlgItemMessageA
DialogBoxParamA
DestroyWindow
DefWindowProcA
SendMessageA
PostQuitMessage
ShowWindow
SetWindowTextA
CheckDlgButton
LoadImageA
comdlg32
GetOpenFileNameA
advapi32
RegSetValueExA
RegCloseKey
RegOpenKeyA
RegCreateKeyA
RegQueryValueExA
msvcrt
_acmdln
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_itoa
exit
_XcptFilter
_exit
vsprintf
sprintf
_vsnprintf
free
malloc
atoi
_mbsrchr
iphlpapi
GetAdaptersInfo
ws2_32
inet_ntoa
inet_addr
wch55xispdll
WCH55x_GetIspDeviceInfor
WCH55x_IspRemoveProtect
WCH55x_FlashProgramB
WCH55x_SetIspOption
WCH55x_EnumDevices
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ