Static task
static1
Behavioral task
behavioral1
Sample
7d7618c14067699452cbaa4edffec9a4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7d7618c14067699452cbaa4edffec9a4.exe
Resource
win10v2004-20231215-en
General
-
Target
7d7618c14067699452cbaa4edffec9a4
-
Size
123KB
-
MD5
7d7618c14067699452cbaa4edffec9a4
-
SHA1
00e0d56b9123e081c39d1e8c255db0b2fd8a3481
-
SHA256
641a16b42e680f3364465b7998fd12f70ac03502d98ef757882e0b790b5bd0dc
-
SHA512
4931587d829e8e21a11da7089dbbe8ccb53e25e5b4c1dd190398b0030e16e8d6cf5138f7310a711d45e05f450e2a5107bbdeb5abbff5d5205296dcf00bb42055
-
SSDEEP
3072:ed53TvpHeIl0Z6raaBSTi0qQqIsbQxDdIrYinOzxjrcNJ7BsCQC:ed53TvpHeIl0gaaKQQxD2rxOzxjrC7BT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d7618c14067699452cbaa4edffec9a4
Files
-
7d7618c14067699452cbaa4edffec9a4.exe windows:6 windows x86 arch:x86
19abb3665ae1ff2bd877ad7bd730dcae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_exit
__set_app_type
_except_handler3
ftell
_controlfp
fseek
fread
rand
_wtoi
strcspn
memcpy
rewind
__p__fmode
fopen
fclose
free
system
atoi
atof
malloc
__p__commode
winmm
PlaySoundW
kernel32
GetModuleHandleA
lstrcmpW
LocalFree
VirtualProtect
GetCommandLineW
GetStartupInfoA
shell32
SHGetFolderPathW
CommandLineToArgvW
user32
GetClientRect
GetWindowRect
MapWindowPoints
FillRect
GrayStringA
GetDC
wsprintfW
SendMessageW
PostQuitMessage
IsWindow
ShowWindow
SetFocus
SetWindowTextW
GetWindowTextLengthW
LoadImageA
LoadImageW
GetMessageW
TranslateMessage
DispatchMessageW
RegisterClassW
GetSysColorBrush
LoadCursorW
GetWindowTextW
DrawTextW
GetSystemMetrics
SetWindowPos
CreateWindowExW
DefWindowProcW
RedrawWindow
SetWindowLongW
InvalidateRect
gdi32
BitBlt
CreateSolidBrush
SelectObject
SetBkMode
SetTextColor
GetObjectW
CreateCompatibleDC
CreateFontW
GetStockObject
SetBkColor
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ