Static task
static1
Behavioral task
behavioral1
Sample
7eee798484f0bf84e7703a8590ea8967f4ea7c65bdf77f3a4ca0b527011b3b62.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
7eee798484f0bf84e7703a8590ea8967f4ea7c65bdf77f3a4ca0b527011b3b62.exe
Resource
win10v2004-20230703-en
General
-
Target
7eee798484f0bf84e7703a8590ea8967f4ea7c65bdf77f3a4ca0b527011b3b62
-
Size
15.4MB
-
MD5
e5032b1e7fa49a815042aabb027e654f
-
SHA1
f1fcb51421e529753035b35f517200b2d5694584
-
SHA256
7eee798484f0bf84e7703a8590ea8967f4ea7c65bdf77f3a4ca0b527011b3b62
-
SHA512
c424bcea937daa010533ab256a373445ae88260018bf2ef5d377c9b57336ed50417f3149e7ae74d5712d9320057c18e43a9b7edfe425f74f28768133ebe1a48e
-
SSDEEP
393216:Ko94RUIUSrMh83D0MRDegGnlhqX3qBDcw:H9FIUyn3AMROlhqZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7eee798484f0bf84e7703a8590ea8967f4ea7c65bdf77f3a4ca0b527011b3b62
Files
-
7eee798484f0bf84e7703a8590ea8967f4ea7c65bdf77f3a4ca0b527011b3b62.exe windows x86
6517a274e0063dafecd2e143a0de00cd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
tbeauty
TBeauty_CreateTdxTab
tcalc
?GetTypeNum@CMainCalcInterface@@QAEJXZ
tcontrol
??1CMarkup@@QAE@XZ
viewthem
?INFO_GetCjzxNum@@YAHXZ
invest
?SetPrivateInvestDir@@YAXPAD@Z
tmarquee
NewMarquee
tjyaid
GetWtDefInfoFromETradeXML_More
tqqcalc
TQQCalc_Index
tqqanaly
TQQAnaly_RegisterCallBack
mfc100
ord3892
msvcr100
_localtime64_s
kernel32
GetProcAddress
user32
KillTimer
gdi32
GetObjectA
msimg32
AlphaBlend
advapi32
RegSetValueExA
shell32
SHGetFileInfoA
comctl32
_TrackMouseEvent
ole32
CoInitialize
oleaut32
OleLoadPicture
gdiplus
GdipAlloc
wsock32
WSAGetLastError
msvcp100
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
winmm
PlaySoundA
imm32
ImmIsIME
tgear
RejustDateCtrlRange
tdxasiocomm
?MakeUserCommModule@@YAPAVVUserComm@@XZ
ribbonbar
?ReLoadUserCfg@@YAXJ@Z
psapi
GetProcessImageFileNameA
ws2_32
getaddrinfo
Sections
.text Size: - Virtual size: 5.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 808KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 942KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 769KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 10KB - Virtual size: 9KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 356KB - Virtual size: 356KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE