Static task
static1
Behavioral task
behavioral1
Sample
c07d2a72f0dd39fc9e2013570e5a7e89c2b5c483f96da3d2e9d0dab4f4d97676.exe
Resource
win7-20230712-en
General
-
Target
c07d2a72f0dd39fc9e2013570e5a7e89c2b5c483f96da3d2e9d0dab4f4d97676
-
Size
1.4MB
-
MD5
4b8a81b3d23c38f2311bf055492b2d59
-
SHA1
3be48b7309330c2024a7a28ff9cf27e10a583861
-
SHA256
c07d2a72f0dd39fc9e2013570e5a7e89c2b5c483f96da3d2e9d0dab4f4d97676
-
SHA512
00b8cf6e95850aa05bae82ab255878b36aa2399976bedd099db93823e9a20d78efbc7020191b948f34649c2bb650dcf3d9957538f5a0ce2fb4450faa450d318a
-
SSDEEP
24576:xBO3hR57EnUofYiqSlrXG7ivSK5IK0v139pZzB8A7QcYF8af7CKRT3FZ:AR57WvYQSK5IT9poADM8a7lRT7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c07d2a72f0dd39fc9e2013570e5a7e89c2b5c483f96da3d2e9d0dab4f4d97676
Files
-
c07d2a72f0dd39fc9e2013570e5a7e89c2b5c483f96da3d2e9d0dab4f4d97676.exe windows x86
b70a5c3df2fb546792d4acbec9951bb0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
user32
GetWindow
advapi32
RegDeleteKeyA
shell32
SHGetFolderPathW
Sections
.data Size: 597KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 776KB - Virtual size: 776KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ