Static task
static1
Behavioral task
behavioral1
Sample
797aec9c3c64025aae61db71c895770a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
797aec9c3c64025aae61db71c895770a.exe
Resource
win10v2004-20231215-en
General
-
Target
797aec9c3c64025aae61db71c895770a
-
Size
704KB
-
MD5
797aec9c3c64025aae61db71c895770a
-
SHA1
1b42bff1454455854a00707588658448e1e826c7
-
SHA256
dc7c5c2b06fe6696718a515b0bda6fa444076b0b221f4d095c1423f99cca89e0
-
SHA512
62fb8fba461c94c962fd6d83270604ac76c373dac246ae8460285c5caea51b2ce6b16e1ecd26d810b31cf2cf428b095983d1791853b923cc1d3a8b61819fd39e
-
SSDEEP
12288:UJqGkFdPpOazpmaI9asTaE+cDuBo5v3ca4U1EupHNKlFxboHBzujL8i:U2FdhOazpmalAn+cDum9311Eu9sjpoHo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 797aec9c3c64025aae61db71c895770a
Files
-
797aec9c3c64025aae61db71c895770a.exe windows:4 windows x86 arch:x86
70c1112891499003eceb597964dc653d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
inet_addr
WSACleanup
inet_ntoa
gethostbyname
gethostname
WSAStartup
ntohl
kernel32
GetModuleFileNameA
MultiByteToWideChar
GetProcAddress
lstrlenA
WideCharToMultiByte
GetTickCount
FreeLibrary
LoadLibraryA
CloseHandle
GetLastError
CreateMutexA
GetDiskFreeSpaceExA
GetCurrentDirectoryA
LockResource
SizeofResource
LoadResource
FindResourceA
CreateFileA
FlushFileBuffers
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
ReadFile
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
RaiseException
UnhandledExceptionFilter
HeapSize
HeapReAlloc
GetCurrentProcess
TerminateProcess
WriteFile
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
DeleteCriticalSection
InitializeCriticalSection
TlsGetValue
LeaveCriticalSection
RtlUnwind
InterlockedDecrement
InterlockedIncrement
GetTimeZoneInformation
GetSystemTime
GetLocalTime
DeleteFileA
CreateDirectoryA
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
EnterCriticalSection
user32
GetDlgItem
KillTimer
SetDlgItemTextA
PostMessageA
LoadStringA
EndDialog
SetTimer
ShowWindow
SetForegroundWindow
GetClientRect
SetWindowPos
EnableWindow
IsWindow
PeekMessageA
DefWindowProcA
DialogBoxParamA
GetCursorPos
LoadMenuA
GetSubMenu
MessageBoxA
TrackPopupMenu
SetFocus
GetWindowLongA
LoadIconA
GetWindowTextA
SetWindowTextA
SendMessageA
gdi32
SetTextColor
advapi32
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyA
shell32
Shell_NotifyIconA
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
ole32
CoUninitialize
CoFreeLibrary
CoLoadLibrary
wininet
InternetCanonicalizeUrlA
Sections
.text Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 588KB - Virtual size: 586KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ