Static task
static1
Behavioral task
behavioral1
Sample
07e7e4494cea0f3356a610d15c525771.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
07e7e4494cea0f3356a610d15c525771.exe
Resource
win10v2004-20231222-en
General
-
Target
07e7e4494cea0f3356a610d15c525771
-
Size
185KB
-
MD5
07e7e4494cea0f3356a610d15c525771
-
SHA1
c7c1e2a832cd1f26f5fad5c81f30e7f6cfccedf3
-
SHA256
44f978f52b1d07e5b98cef69410bcd2dac0f342f009e20afc7810cfecdb542d0
-
SHA512
dcdb320f1ee26fb52f193a7e8526d3c02cf9da8febebbec7d52f4ea8448dac223b1876c85df423212a83ef6b4657bcd117a766ed3393c716fd5e7d1b710da839
-
SSDEEP
3072:S8m3lt9iGsrXbfZS27VEnrNh5nfc+jNhZ8av35xxm0dFq6QcAIv:SCXf4Oar5nfvXR35bdk6TAIv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07e7e4494cea0f3356a610d15c525771
Files
-
07e7e4494cea0f3356a610d15c525771.exe windows:4 windows x86 arch:x86
1c982a83153b78fd36a250da8aec3720
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MoveFileExA
GetTempFileNameA
WinExec
Sleep
GetCurrentThreadId
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetTempPathA
GetModuleFileNameA
ExitThread
GetProcAddress
ExitProcess
LoadLibraryA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
HeapReAlloc
VirtualAlloc
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
GetLastError
WriteFile
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetStringTypeW
user32
EndDialog
DefWindowProcA
DestroyWindow
DialogBoxParamA
BeginPaint
GetClientRect
DrawTextA
EndPaint
PostQuitMessage
CreateWindowExA
UpdateWindow
GetInputState
PostThreadMessageA
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 408B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ