Static task
static1
Behavioral task
behavioral1
Sample
7a159b07e6d9dda240c631bc8a041ffa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7a159b07e6d9dda240c631bc8a041ffa.exe
Resource
win10v2004-20231215-en
General
-
Target
7a159b07e6d9dda240c631bc8a041ffa
-
Size
209KB
-
MD5
7a159b07e6d9dda240c631bc8a041ffa
-
SHA1
4c718b6748eaea19dbf02a0aa8a7a2c99fe77a48
-
SHA256
605630ebd93989dc12065cb204f66423a1bbdb86d0c5cfa9f17d6a13eb617421
-
SHA512
196c2139a3f9f10f8d2e6d4aed2e9ce359e59d2aba58af35d77782da8dd801b4e6948e4e978139ea2ddcb3d9ed73cc5f13465b6769361e99c234fb7875d89b7a
-
SSDEEP
3072:yldkvjYxlEg9NRkTSc7MgM/TY4nBRTpNDNnMcToomOBObZFuAdvhDuU/F1sd:yld18g9jkTScbWfDx56wOdAATDfFGd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a159b07e6d9dda240c631bc8a041ffa
Files
-
7a159b07e6d9dda240c631bc8a041ffa.exe windows:4 windows x86 arch:x86
691f1193f16065947032ace3a2329e55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
fabs
comctl32
InitCommonControls
user32
IsChild
gdi32
BitBlt
ole32
CoInitialize
shell32
ShellExecuteExA
shlwapi
PathQuoteSpacesA
Sections
.MPRESS1 Size: 204KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE