Static task
static1
Behavioral task
behavioral1
Sample
07442099.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
07442099.exe
Resource
win10v2004-20230220-en
General
-
Target
07442099.exe
-
Size
76KB
-
MD5
4068cf6d836f193c4946218856e893be
-
SHA1
afc46878910d5334b7539de168ac3ca4fa745be7
-
SHA256
7909ae2d4888c27b68c1b21b4a5264ff952137d4498a22e8f2959cd9828d282f
-
SHA512
d31ae00a2436bf1fe3d797e7750d337f2232da7e2e06351cc3cd84702d1f15009f1198197e213d27c6b8d348a00ab6517518e59272b3969f652383412fb931bb
-
SSDEEP
768:kKJXH8wDzY07INuLOq+T6666666666666666666666666666666666666666666U:vXHjPWuLO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07442099.exe
Files
-
07442099.exe.exe windows x86
cd1df5a9814fe17cd064fad17e12bad5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
LocalAlloc
CreateFileA
CloseHandle
FreeConsole
ExitProcess
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
user32
MessageBoxW
ExitWindowsEx
vcruntime140
memset
__current_exception
__current_exception_context
_except_handler4_common
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_exit
__p___argc
_crt_atexit
_controlfp_s
terminate
exit
_cexit
_initterm_e
_register_thread_local_exe_atexit_callback
_set_app_type
_seh_filter_exe
__p___argv
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_register_onexit_function
_configure_narrow_argv
_c_exit
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 364B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ