?CloseWindowStationCloseWi
Static task
static1
Behavioral task
behavioral1
Sample
7a17c8bf622c5574e34bd2bdce707b0e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7a17c8bf622c5574e34bd2bdce707b0e.exe
Resource
win10v2004-20231222-en
General
-
Target
7a17c8bf622c5574e34bd2bdce707b0e
-
Size
171KB
-
MD5
7a17c8bf622c5574e34bd2bdce707b0e
-
SHA1
2f86cd44a8f5c9d09ddc06e7de96af2eec7ef598
-
SHA256
46f0f91f4d08c5a5c8e42bad319b3a762ed509d7c9eb9281ee538a71dbb4ff2d
-
SHA512
d751b924d6b2e7eae249c1dbdab6a39b804bae7f2e53959467710e37d198dd0b8a204b147d3c81168545a5778c5b56b45e65279b0e761c0e76c6f95d56ef70e0
-
SSDEEP
3072:Wx6RseNcTY5pMb0CkRO+it2Ed9PbNBtKo7b6HNAop3bs1IXVYp4/4Ndc:HRseNcf0Ck8NtRHOMqAoJbs1uLH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a17c8bf622c5574e34bd2bdce707b0e
Files
-
7a17c8bf622c5574e34bd2bdce707b0e.exe windows:5 windows x86 arch:x86
284f0460785cad6dd2cd6c8a3b378a37
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyMenu
kernel32
GlobalAlloc
GlobalGetAtomNameA
lstrcmpA
SetupComm
GetComputerNameExW
IsBadStringPtrA
OpenFileMappingW
GetThreadLocale
GetUserDefaultUILanguage
FormatMessageA
SetFileAttributesA
CreateEventW
FileTimeToSystemTime
GetModuleFileNameW
MultiByteToWideChar
AreFileApisANSI
GetVersionExA
OpenFileMappingA
Exports
Exports
Sections
.text Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rewf Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sddfd Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wqwq Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wqwewe Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aewew Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ