Static task
static1
Behavioral task
behavioral1
Sample
7ce74950ea0c9c7192e1e7a78d063c5733b2bbd150358e5f72d968a5b3d66555.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
7ce74950ea0c9c7192e1e7a78d063c5733b2bbd150358e5f72d968a5b3d66555.exe
Resource
win10v2004-20231020-en
General
-
Target
7ce74950ea0c9c7192e1e7a78d063c5733b2bbd150358e5f72d968a5b3d66555
-
Size
2.9MB
-
MD5
c7705490e6dc7a69dd751e694ff0a937
-
SHA1
1d2f932c27f05e59ef074cde0d24736aee029d79
-
SHA256
7ce74950ea0c9c7192e1e7a78d063c5733b2bbd150358e5f72d968a5b3d66555
-
SHA512
27a4c4d1f5ff8ceb43ed29c1af05f8182c9cf6b88e861423d1f8e898d5bdd4b7f1b63b6403238bda3c47a9924c19b36180aa45c07957ee1802a9581e8a323e8b
-
SSDEEP
49152:e0kyIx0KRlxdg/ZqM7XhMs8gma32WftkfR8QVrDAMbzKHtv2/F6Smr1zevafjRbP:elxbL2/oMLmbghmTfR7/AMbct+F6SmrL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ce74950ea0c9c7192e1e7a78d063c5733b2bbd150358e5f72d968a5b3d66555
Files
-
7ce74950ea0c9c7192e1e7a78d063c5733b2bbd150358e5f72d968a5b3d66555.exe windows:4 windows x86
c5f4fae9635b7eeac6085faa57e92d07
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvfw32
DrawDibDraw
avifil32
AVIStreamGetFrame
winmm
midiStreamOut
ws2_32
WSACleanup
user32
wvsprintfA
gdi32
CombineRgn
msimg32
GradientFill
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
RevokeDragDrop
oleaut32
SafeArrayGetLBound
comctl32
_TrackMouseEvent
wininet
FindFirstUrlCacheEntryA
Sections
.text Size: 2.9MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE