Static task
static1
Behavioral task
behavioral1
Sample
7661.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
7661.exe
Resource
win10v2004-20230220-en
General
-
Target
7661.EXE
-
Size
668KB
-
MD5
6289e2ad9d98936ff8d0dac0dd522b21
-
SHA1
cadd081063d1271c7a1b47c1e6ce466b469ebefa
-
SHA256
b9ea9307625d102c7a6640e8cab83f9d1e7d3feb8069d1eb7bc85a80192e011e
-
SHA512
c2323217d9d12b8d964989728403931b82f92ea13b1bb49b8c6449aa49f4d66df6db49a0f871dc724fbae15fd3bb1264b2febdbf68056c3556b32d25e365a792
-
SSDEEP
12288:SbJXPtju/m+2uxVvOUvitPOnLtqejlWn5NlZVUT/Vc57A2YhqnuM:alKm+JAUxLhWn/xUGGd+uM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7661.EXE
Files
-
7661.EXE.exe windows x86
361895b32e9a712ea2d7c5f140186048
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
LocalFree
SizeofResource
LockResource
CreateFileA
FindResourceA
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFileTime
GetFileSize
GlobalAlloc
ReadFile
CloseHandle
GlobalFree
GetLocalTime
lstrcpyA
LoadResource
HeapReAlloc
InterlockedIncrement
HeapFree
GetProcessHeap
HeapAlloc
TlsFree
GetCurrentThreadId
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
GetVolumeInformationA
FormatMessageA
ReleaseMutex
CreateMutexA
InterlockedCompareExchange
InterlockedDecrement
GetStartupInfoA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ReleaseSemaphore
OpenSemaphoreA
CreateSemaphoreA
WaitForSingleObject
SearchPathA
Sleep
GetLastError
FindNextFileA
FindFirstFileA
SetErrorMode
DeviceIoControl
GetVersion
FreeLibrary
GetSystemTime
SystemTimeToFileTime
FindClose
WriteFile
LocalAlloc
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetEnvironmentVariableA
GetCurrentProcessId
lstrcatA
user32
MessageBoxA
wsprintfA
advapi32
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
msvcrt
?set_new_handler@@YAP6AXXZP6AXXZ@Z
??9type_info@@QBEHABV0@@Z
?name@type_info@@QBEPBDXZ
malloc
memmove
_CxxThrowException
??0exception@@QAE@XZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
free
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
??1type_info@@UAE@XZ
_controlfp
__dllonexit
_except_handler3
memcmp
memset
??8type_info@@QBEHABV0@@Z
_purecall
strstr
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
fopen
fprintf
vfprintf
fclose
msvcp60
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0bad_alloc@std@@QAE@PBD@Z
??1bad_alloc@std@@UAE@XZ
??0bad_alloc@std@@QAE@ABV01@@Z
?assign@?$char_traits@D@std@@SAXAADABD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@DABV10@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIID@Z
?_Xlen@std@@YAXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
Sections
.text Size: 528KB - Virtual size: 526KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ