Static task
static1
Behavioral task
behavioral1
Sample
7z1801.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
7z1801.exe
Resource
win10v2004-20230703-en
General
-
Target
7z1801.exe
-
Size
1.1MB
-
MD5
98eaebc6ebcf37d69658ac9871dbec6f
-
SHA1
d56bca4973b1d1aa5915c41dce318b077ce8b5b2
-
SHA256
c55c60a674114be26ce470f43109d405a5adcd2bd38e346d4a35c98727174eb0
-
SHA512
4a07d1ebe13953d33d8dcd593badfc65fec4376df1a2274674276869fd5a9e4dee91813bbeab3b654fced480722e1db06402261ff68c7af6ac4cf22472f3565b
-
SSDEEP
24576:tasGUKLqJxwbYQLSEQK6ycB6BG+MQ8jsqopiZ9+JUdwveb:taUKLq8EQLJQK69B8HMQDqd8zeb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7z1801.exe
Files
-
7z1801.exe.exe windows x86
45f98c62c578d20b568f4d970edb2d50
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
ole32
CoInitialize
CoCreateInstance
user32
PeekMessageW
ExitWindowsEx
MessageBoxW
GetDlgItemTextW
SetWindowTextW
ShowWindow
CreateDialogParamW
LoadIconW
GetMessageW
EnableWindow
GetDlgItem
IsDialogMessageW
TranslateMessage
DispatchMessageW
SetDlgItemTextW
DestroyWindow
SendMessageW
advapi32
RegSetValueExW
RegCreateKeyExW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
shell32
SHGetFolderPathW
SHBrowseForFolderW
SHGetPathFromIDListW
msvcrt
memmove
memcmp
memcpy
memset
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
free
malloc
kernel32
SetFilePointer
WriteFile
ReadFile
CloseHandle
CreateFileW
FormatMessageW
LocalFree
CreateDirectoryW
GetModuleFileNameW
lstrlenW
GetFileAttributesW
SetFileAttributesW
SetFileTime
MoveFileExW
GetVersionExW
LoadLibraryExW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetStartupInfoA
DeleteFileW
GetLastError
GetCurrentProcess
lstrcatW
GetCommandLineW
lstrcpyW
lstrcpynW
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ