Static task
static1
Behavioral task
behavioral1
Sample
7fad8cc560d6d63b5ec59b66d35f594f173ac85c4820bf1bec0a36356656060b.exe
Resource
win10v2004-20230220-en
General
-
Target
7fad8cc560d6d63b5ec59b66d35f594f173ac85c4820bf1bec0a36356656060b
-
Size
3.2MB
-
MD5
aba5c9eb874822b26fea8ec5b619647b
-
SHA1
7c8cd4a28a2afe24ad5f8de2e5579627cadfcbd4
-
SHA256
7fad8cc560d6d63b5ec59b66d35f594f173ac85c4820bf1bec0a36356656060b
-
SHA512
c70bf13d5a4c372d682ba76523fa07683b4abc43af812e43f83e0e3cf438946f02a3ab2785daf5dd83d6dfb72e94a6589794e04a0992942783476d348d1b50ab
-
SSDEEP
98304:okHDCRDbdmSFLafQYReokwSljXCCf1dZgdX9uASc:fDCRDbIRPR7rS9dDgX0Vc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7fad8cc560d6d63b5ec59b66d35f594f173ac85c4820bf1bec0a36356656060b
Files
-
7fad8cc560d6d63b5ec59b66d35f594f173ac85c4820bf1bec0a36356656060b.exe windows x64
d67ed57d8ca3a17a0ec6b73511cd5e0b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ws2_32
freeaddrinfo
kernel32
GetComputerNameA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
CloseClipboard
advapi32
RegCloseKey
Sections
.text Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 636B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.0Dev Size: - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
6jk7i5y0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
6jk7i5y1 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6jk7i5y2 Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ