Static task
static1
Behavioral task
behavioral1
Sample
7bb2b394fdce1a5d2a7840e4a7983bc3ebe019a14b80981865ba2817f34ebb4e.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
7bb2b394fdce1a5d2a7840e4a7983bc3ebe019a14b80981865ba2817f34ebb4e.exe
Resource
win10v2004-20230915-en
General
-
Target
7bb2b394fdce1a5d2a7840e4a7983bc3ebe019a14b80981865ba2817f34ebb4e
-
Size
191KB
-
MD5
a7b6f1555f58fab6b2daa823cadaa72f
-
SHA1
3f9130e69fc68659583438c0a655b4ec5ee2f1bb
-
SHA256
7bb2b394fdce1a5d2a7840e4a7983bc3ebe019a14b80981865ba2817f34ebb4e
-
SHA512
553e88a8be9e49056351e445fb418a7a8c5ed92da4ef8ca9ff191622797100f5757d0713e1d728a2a55cc0661c995c9570c29a34b46f504a660a8d5b6eb04a80
-
SSDEEP
3072:Ra1h/2luxuSwCufvBufv5PSCFgevagevDDS+4MMvOMMv7uSlwg4vag4vAt1srLQF:R+h/2luxuSwiPSCmDS+5uSlKt1st2T1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7bb2b394fdce1a5d2a7840e4a7983bc3ebe019a14b80981865ba2817f34ebb4e
Files
-
7bb2b394fdce1a5d2a7840e4a7983bc3ebe019a14b80981865ba2817f34ebb4e.exe windows:4 windows x86
b8360d4b87957ddf2f81d43fdaa5bda8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetNativeSystemInfo
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetSystemTimeAsFileTime
GetThreadLocale
GetTickCount
HeapAlloc
HeapFree
InitializeCriticalSection
IsBadReadPtr
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
QueryPerformanceCounter
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WideCharToMultiByte
lstrlenA
msvcrt
__dllonexit
__getmainargs
__initenv
__lconv_init
__mb_cur_max
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_errno
_fmode
_initterm
_iob
_lock
_onexit
_unlock
_wcsnicmp
abort
atoi
bsearch
calloc
exit
fprintf
fputc
free
fwrite
getenv
localeconv
malloc
mbstowcs
memcpy
memset
qsort
realloc
setlocale
signal
strchr
strcmp
strerror
strlen
strncmp
strstr
strtol
strtoul
vfprintf
wcslen
wcstombs
ws2_32
htons
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 148KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ