Static task
static1
Behavioral task
behavioral1
Sample
07728999.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
07728999.exe
Resource
win10v2004-20230220-en
General
-
Target
07728999.exe
-
Size
44KB
-
MD5
6a6f5a37a55278efd5e7aeff94384edc
-
SHA1
ff876f9acc63bd0bb0df1d2a9fef4e5fec3a37ab
-
SHA256
c2e8a9326cb28ca3c1408fe7524c944c52c97e77b95204c780c9b1d5179d9977
-
SHA512
46b43f78c29bce1b5469bf62f12b7492f26727446b0e07b6aed02cddcc61db7f933de0dd43f95fc9dbf8dd6bb8e8e47a8a4ad436efe999efb92263c0610c78bb
-
SSDEEP
384:FFYhfKMIDdpf9RwkJzEmlurEjDzLyW919x7iok:fYAMIhpF6kdBDLD91D7iok
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07728999.exe
Files
-
07728999.exe.exe windows x86
8e17d51bde626383344d4af9c00f818f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
WideCharToMultiByte
CreateToolhelp32Snapshot
Process32First
Process32Next
GetStringTypeA
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
GetSystemDirectoryA
lstrlenA
CreateProcessA
CloseHandle
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
GetStringTypeW
user32
DispatchMessageA
TranslateMessage
GetMessageA
KillTimer
wsprintfA
DefWindowProcA
GetDesktopWindow
RegisterClassExA
CreateWindowExA
SetTimer
ShowWindow
advapi32
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
ole32
StringFromIID
CoTaskMemFree
CoGetMalloc
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
shared Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ