Static task
static1
Behavioral task
behavioral1
Sample
7595be65f3c75568507d6a0b2492edd4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7595be65f3c75568507d6a0b2492edd4.exe
Resource
win10v2004-20231215-en
General
-
Target
7595be65f3c75568507d6a0b2492edd4
-
Size
200KB
-
MD5
7595be65f3c75568507d6a0b2492edd4
-
SHA1
ce5ed0abe3c5678e57abf7497b20b8e424c813bd
-
SHA256
b5da3c9742ff351897f5d14353517a738339add7c0b1b031d6ae986eb88c0a1d
-
SHA512
f7887a466d69192ba018db0cdd245b82a4d62a9bfdb0be3e2320584b12861f26fa5a7e94ea125ebc8d225b9d5dfae171d4307c83b837a1043a3a38b079df938e
-
SSDEEP
3072:28HbO+b6gykHYrsPlib/9vHVHKkqe6YEpR/Z1Gbq3s4CEMHxJ64HO7:5Tb6gyXs9iThFUYEpFZ10q3tCj3du7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7595be65f3c75568507d6a0b2492edd4
Files
-
7595be65f3c75568507d6a0b2492edd4.exe windows:4 windows x86 arch:x86
ca868940b757949ffde1eb1dc5818e0a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendMessageA
SystemParametersInfoA
DestroyWindow
GetDesktopWindow
GetWindowLongA
GetDlgItem
SendDlgItemMessageA
SetWindowLongA
EndPaint
BeginPaint
InvalidateRect
GetParent
CheckRadioButton
IsDlgButtonChecked
EnableWindow
SetDlgItemTextA
PostMessageA
SetFocus
WaitForInputIdle
InflateRect
OffsetRect
LoadBitmapA
ReleaseDC
GetDC
DrawTextA
GetSysColor
EndDialog
SetWindowTextA
GetSystemMenu
EnableMenuItem
DefDlgProcA
RegisterClassA
CharPrevA
DialogBoxParamA
CheckDlgButton
CallWindowProcA
GetWindow
FindWindowA
GetWindowRect
GetSystemMetrics
SetWindowPos
wsprintfA
MessageBoxA
DefWindowProcA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
LoadStringA
SetForegroundWindow
gdi32
CreateBitmap
GetStockObject
CreateCompatibleDC
GetObjectA
DeleteObject
StretchBlt
BitBlt
DeleteDC
CreateFontIndirectA
SelectObject
GetTextExtentPoint32A
GetBkMode
SetBkColor
SetTextColor
ExtTextOutA
SetBkMode
UpdateColors
SelectPalette
RealizePalette
StretchDIBits
CreatePalette
GetDeviceCaps
kernel32
lstrcpyA
FreeLibrary
GetProcAddress
GlobalAlloc
FindClose
RtlZeroMemory
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
VirtualAlloc
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetLogicalDriveStringsA
GetDriveTypeA
ReleaseMutex
lstrcmpiA
lstrcmpA
SetFileAttributesA
GlobalFree
WinExec
lstrlenA
WideCharToMultiByte
CreateThread
LockResource
LoadResource
FindResourceA
GetVolumeInformationA
CloseHandle
GetLastError
CreateProcessA
SearchPathA
WaitForSingleObjectEx
Sleep
CreateMutexA
OpenMutexA
WaitForSingleObject
lstrcatA
FindNextFileA
FindFirstFileA
GetFileAttributesA
OpenFile
MoveFileA
CreateDirectoryA
GetDiskFreeSpaceExA
DeleteFileA
LoadLibraryA
MultiByteToWideChar
GetLocalTime
GetWindowsDirectoryA
GetDateFormatA
GetTimeFormatA
GetUserDefaultLCID
shell32
ShellExecuteA
comctl32
ord17
PropertySheetA
advapi32
RegCreateKeyExA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyA
RegEnumKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
ole32
CoInitialize
CoCreateInstance
CoTaskMemFree
CLSIDFromString
CoUninitialize
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ