Static task
static1
Behavioral task
behavioral1
Sample
7d69e2c4e75c76c201d40dbc04b9f13b2f47bf9667ce3b937dd4b1d31b11a8af.bin.exe
Resource
win7-20230712-en
General
-
Target
7d69e2c4e75c76c201d40dbc04b9f13b2f47bf9667ce3b937dd4b1d31b11a8af.bin.sample
-
Size
27KB
-
MD5
11e8669acf8e457936d4a7813e7ce3c8
-
SHA1
f7325a169338aea0cff64b9cf378bfc67a1b9711
-
SHA256
7d69e2c4e75c76c201d40dbc04b9f13b2f47bf9667ce3b937dd4b1d31b11a8af
-
SHA512
b6402647ccdf7eb52fb442802f86a355b572b6911517fc61836fea14a82be3c6b4d23da1d06cea914935b47f3499ad6a38ea2824e4b280d53be010a6adf536e8
-
SSDEEP
768:rIAkwvBZSeL0yEp5/WNuxxTsDn51jMrC8M52R7:rIAkwJrgNpdWNuzTsDnvaR7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d69e2c4e75c76c201d40dbc04b9f13b2f47bf9667ce3b937dd4b1d31b11a8af.bin.sample
Files
-
7d69e2c4e75c76c201d40dbc04b9f13b2f47bf9667ce3b937dd4b1d31b11a8af.bin.sample.exe windows
b3ca8d7e77110bb0b791d1a22490bad4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetFolderPathA
ole32
CoCreateInstance
CoSetProxyBlanket
CoInitialize
oleaut32
VariantClear
SysAllocString
SysFreeString
kernel32
DeleteFileA
EnterCriticalSection
ExitProcess
GetCommandLineA
GetComputerNameA
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTickCount
GetVersionExA
GetVolumeInformationA
InitializeCriticalSection
IsBadStringPtrW
LeaveCriticalSection
RtlUnwind
WideCharToMultiByte
lstrlenW
user32
LoadCursorA
LoadIconA
GetMessageA
TranslateMessage
DispatchMessageA
RegisterClassA
PostQuitMessage
CreateWindowExA
DestroyWindow
DefWindowProcA
gdi32
GetStockObject
advapi32
ChangeServiceConfig2A
CloseServiceHandle
CreateServiceA
OpenSCManagerA
OpenServiceA
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceA
StartServiceCtrlDispatcherA
RegOpenKeyExA
RegQueryValueExA
crtdll
__GetMainArgs
exit
raise
signal
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE