Static task
static1
Behavioral task
behavioral1
Sample
7973fdf84114d83353d9f39a717e5e47.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7973fdf84114d83353d9f39a717e5e47.exe
Resource
win10v2004-20231215-en
General
-
Target
7973fdf84114d83353d9f39a717e5e47
-
Size
161KB
-
MD5
7973fdf84114d83353d9f39a717e5e47
-
SHA1
8cc75af5e1a46812bb8d09a062bd7e55349e2808
-
SHA256
5a15aaf482c9d69ece097a3ff7c5673a91abb27f52623d3bb74eff0615a3a449
-
SHA512
47bad3fc5dbe5a722641eb7a54ea865fb567f6c2463671bb0336979f7220c806b0e4c32aa751127056396d811ae688e910c8e72de12681b8248a01f6e7a3454b
-
SSDEEP
3072:jnwIB2GKS1ASA/JTNYmulp1u8Ih28jImTdSYEcmpQeUcKxpSjwFF:jyzSA//ur1O2OdDqOcqum
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7973fdf84114d83353d9f39a717e5e47
Files
-
7973fdf84114d83353d9f39a717e5e47.exe windows:4 windows x86 arch:x86
9c3d481bfa437e7c97525b3ddb232dec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
CreateErrorInfo
DispGetIDsOfNames
BstrFromVector
OleLoadPictureEx
GetErrorInfo
kernel32
GetVersionExA
GlobalLock
GlobalAlloc
GlobalReAlloc
GetModuleHandleA
GlobalSize
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceA
LocalAlloc
LocalFree
CreateFileA
lstrcmpA
GetFileAttributesA
GetProcAddress
GetModuleFileNameA
GetTempPathA
DeleteFileA
CloseHandle
GetCurrentDirectoryA
GetLocalTime
FindClose
FindNextFileA
FindFirstFileA
EnumResourceLanguagesA
WideCharToMultiByte
ReadFile
WriteFile
SetFilePointer
GlobalHandle
IsDBCSLeadByte
GetModuleHandleA
VirtualProtect
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcessHeap
CreateProcessA
GetTempFileNameA
HeapFree
HeapAlloc
LoadLibraryW
InterlockedExchange
Sleep
InterlockedCompareExchange
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
GlobalFree
GlobalUnlock
GetCurrentThread
lstrlenA
MulDiv
MultiByteToWideChar
FreeLibrary
RaiseException
LoadLibraryA
FormatMessageA
GetSystemDirectoryW
setupapi
CM_Get_DevNode_Status
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
user32
SetWindowLongA
SetWindowTextA
SendMessageA
GetDlgItem
wsprintfA
WaitForInputIdle
CharUpperA
MessageBoxA
Sections
.text Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ