Static task
static1
Behavioral task
behavioral1
Sample
7fb2fdb0e7e6418186d8823b7456887de61f7104b4718e96758b4b103ce1acab.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
7fb2fdb0e7e6418186d8823b7456887de61f7104b4718e96758b4b103ce1acab.exe
Resource
win10v2004-20230220-en
General
-
Target
7fb2fdb0e7e6418186d8823b7456887de61f7104b4718e96758b4b103ce1acab
-
Size
432KB
-
MD5
4f33a4732b4a036f19822cea9e94c07b
-
SHA1
f0f0a7a3db2ebdb7fc126bbc3d865063d8d9f659
-
SHA256
7fb2fdb0e7e6418186d8823b7456887de61f7104b4718e96758b4b103ce1acab
-
SHA512
7ada4cac4e66dbba5487020a6d1602ac6fa59949ae5669bf441cba1ed564683f6ee0ad8af0450ecc506d2335a4dbe3249c18e852f90ef4e2edea16b7018ba167
-
SSDEEP
12288:eVNVFzj7PWgjOzq9c9TboHShNDq87Kvkh:eVNVtXWduy9TlTush
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7fb2fdb0e7e6418186d8823b7456887de61f7104b4718e96758b4b103ce1acab
Files
-
7fb2fdb0e7e6418186d8823b7456887de61f7104b4718e96758b4b103ce1acab.exe windows x86
ab43b07352b474ecbda5bc6aee8b802d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
InitCommonControlsEx
msimg32
AlphaBlend
TransparentBlt
winmm
PlaySoundA
kernel32
SetThreadPriority
CreateThread
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceA
QueryPerformanceCounter
GlobalUnlock
GlobalLock
GlobalAlloc
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
CreateFileA
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter
SetStdHandle
LCMapStringW
LCMapStringA
InitializeCriticalSection
InterlockedExchange
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetTimeZoneInformation
VirtualFree
HeapCreate
WaitForSingleObject
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
ReadFile
WriteFile
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
GetCPInfo
GetOEMCP
GetACP
HeapSize
TerminateProcess
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetModuleFileNameA
GetTickCount
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
HeapFree
HeapAlloc
GetVersionExA
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
CompareStringW
GetFullPathNameA
GetDriveTypeA
CloseHandle
GetThreadTimes
Sleep
FlushFileBuffers
SetEndOfFile
GetLocaleInfoW
CompareStringA
HeapDestroy
SetCurrentDirectoryA
GetCurrentDirectoryA
SetEnvironmentVariableA
RtlUnwind
ExitProcess
RaiseException
GetSystemTimeAsFileTime
GetLastError
CreateDirectoryA
user32
EmptyClipboard
OpenClipboard
CloseClipboard
GetWindowTextA
SetDlgItemTextA
GetClientRect
CallWindowProcA
SetForegroundWindow
FillRect
SetClassLongA
SetWindowLongA
PtInRect
LoadIconA
RegisterClassExA
CreateWindowExA
GetSystemMetrics
SetWindowPos
ShowWindow
PostQuitMessage
DefWindowProcA
PostMessageA
SetWindowTextA
ClientToScreen
SetCapture
GetCursorPos
ScreenToClient
LoadCursorA
SetCursor
EnableMenuItem
InvalidateRect
SetClipboardData
ReleaseCapture
CheckMenuItem
BeginPaint
EndPaint
GetMenuState
GetMenu
GetSubMenu
CheckMenuRadioItem
EnableWindow
SetDlgItemInt
GetDC
ReleaseDC
LoadImageA
MessageBoxA
CreateDialogParamA
IsDlgButtonChecked
DestroyWindow
CheckDlgButton
SendMessageA
IsDialogMessageA
GetMessageA
TranslateAcceleratorA
PeekMessageA
TranslateMessage
DispatchMessageA
LoadAcceleratorsA
DialogBoxParamA
EndDialog
GetDlgItem
SetFocus
UpdateWindow
gdi32
GetStockObject
GetObjectA
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
DeleteDC
comdlg32
GetOpenFileNameA
GetSaveFileNameA
Sections
.text Size: 156KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 220KB - Virtual size: 218KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ