Static task
static1
Behavioral task
behavioral1
Sample
7805e37980c25948dd9abb189d977405.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7805e37980c25948dd9abb189d977405.exe
Resource
win10v2004-20231215-en
General
-
Target
7805e37980c25948dd9abb189d977405.exe
-
Size
298KB
-
MD5
7805e37980c25948dd9abb189d977405
-
SHA1
2100270aca192b0fc17f96858dbab4770b330999
-
SHA256
1476b300798b19206d27e9646fd641f8a62e3d6c6f28eb5458bfa98524a36229
-
SHA512
2b258c85dfa141c749e7d62a43d892c977b54ba0df53e5e57fae71a41aeb7df741459370e9f0d92714bbeb43a9078623fec93d70aa1afa4377b29194c9251e0d
-
SSDEEP
6144:2eCndrdydme8df2HvCeirn7yxHMAroNucXC:2/nVdydme8dfKKR7yp0N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7805e37980c25948dd9abb189d977405.exe
Files
-
7805e37980c25948dd9abb189d977405.exe.exe windows:5 windows x86 arch:x86
2c31137efffdb21e4a7ea36bf1988dce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DebugActiveProcess
LocalUnlock
SetThreadContext
CommConfigDialogA
DebugActiveProcessStop
ConvertThreadToFiber
GlobalAddAtomA
InterlockedIncrement
ReadConsoleA
GetConsoleAliasA
HeapFree
GetEnvironmentStringsW
WriteConsoleInputA
SleepEx
GetFileAttributesExA
GetModuleHandleW
GetTickCount
GetCompressedFileSizeW
GetCommandLineA
GetConsoleCP
GlobalAlloc
SetFileShortNameW
LoadLibraryW
GetLocaleInfoW
ReadFileScatter
SetVolumeMountPointA
DeleteVolumeMountPointW
GlobalFlags
GetModuleFileNameW
FlushFileBuffers
GetShortPathNameA
GetNamedPipeHandleStateW
FindFirstFileA
GetCPInfoExW
GetLastError
GetCurrentDirectoryW
SetLastError
SetComputerNameA
LoadLibraryA
WriteConsoleA
OpenWaitableTimerW
FoldStringA
FindNextFileA
FindFirstVolumeMountPointA
GetModuleHandleA
UpdateResourceW
VirtualProtect
GetCPInfoExA
GetWindowsDirectoryW
GetProfileSectionW
CreateFileW
ReadFile
WriteConsoleW
LCMapStringW
InterlockedDecrement
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
MoveFileA
DeleteFileA
HeapSetInformation
GetStartupInfoW
RaiseException
RtlUnwind
HeapAlloc
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapCreate
HeapDestroy
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
SetFilePointer
HeapSize
GetProcAddress
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
GetCurrentThread
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
FatalAppExitA
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
MultiByteToWideChar
SetConsoleCtrlHandler
GetConsoleMode
SetStdHandle
HeapReAlloc
FreeLibrary
CloseHandle
user32
CharUpperBuffW
CharToOemBuffW
GetNextDlgTabItem
Sections
.text Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 91KB - Virtual size: 31.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pel Size: 512B - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ