Static task
static1
Behavioral task
behavioral1
Sample
7842307735f9b620816f364fc0c5c7fd65bbfdcc86c8c301293b57cad7498a01.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
7842307735f9b620816f364fc0c5c7fd65bbfdcc86c8c301293b57cad7498a01.exe
Resource
win10v2004-20230703-en
General
-
Target
7842307735f9b620816f364fc0c5c7fd65bbfdcc86c8c301293b57cad7498a01
-
Size
62KB
-
MD5
e0c9ca641903fab84a5a14a1ddc907c6
-
SHA1
b2c9af53e96ef01ebda680fc1254ff9ab91cc326
-
SHA256
7842307735f9b620816f364fc0c5c7fd65bbfdcc86c8c301293b57cad7498a01
-
SHA512
82bf7a278ddaf28752e33c4ced8e2719b0f97dacf9cc23660cc8f4439c13e16eef586ced806bb564f42c2e0bae25364052e2cd418720091958a016d6f6ea44a7
-
SSDEEP
768:DaKUKaOZLUj7Q507nOpQJTHWClcsEeXojZ+4BVcEorrEyK:D/E7hnyQ0EcfeBvm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7842307735f9b620816f364fc0c5c7fd65bbfdcc86c8c301293b57cad7498a01
Files
-
7842307735f9b620816f364fc0c5c7fd65bbfdcc86c8c301293b57cad7498a01.exe windows x86
6d777ebbec295bdfe9c3c9d298a1a096
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
ExitThread
FreeLibrary
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetThreadPriority
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
ReadFile
ReadProcessMemory
ResetEvent
ResumeThread
SetEvent
SetFilePointer
SetLastError
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
oleaut32
SysAllocStringLen
SysFreeString
SysReAllocStringLen
user32
CharLowerBuffW
CharUpperBuffW
MessageBoxA
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 14KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.stab Size: 264B - Virtual size: 264B
IMAGE_SCN_MEM_DISCARDABLE
.stabstr Size: 170B - Virtual size: 170B
IMAGE_SCN_MEM_DISCARDABLE