Static task
static1
Behavioral task
behavioral1
Sample
7da141bda1457383f9a6ca7fa383826d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7da141bda1457383f9a6ca7fa383826d.exe
Resource
win10v2004-20231215-en
General
-
Target
7da141bda1457383f9a6ca7fa383826d
-
Size
311KB
-
MD5
7da141bda1457383f9a6ca7fa383826d
-
SHA1
825f2ddf7070716af0f6daa8cbd406e8c9cf59cf
-
SHA256
7275f2475171b0eda0a16186373059751f3cca9898739c91656269dbf23f66bf
-
SHA512
f3316b532cbb72d8a945a04fc31f8f517247b3c40365d9eeeeb2a1e5a2c09c1575c32555bc8cdbdb28e626b2ce3e064d18a93fe0842d3104d90ff02134e75695
-
SSDEEP
6144:ezVbwB8sqjxtNuVflYuo/g4BuFJxlHwUfzVPF0cd6:ezVklsxtCflYuThFJwUfz1k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7da141bda1457383f9a6ca7fa383826d
Files
-
7da141bda1457383f9a6ca7fa383826d.exe windows:4 windows x86 arch:x86
30106ae180d6063b64b2eb2e75ffd581
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
SearchPathA
FindAtomA
OpenMutexA
FindResourceExA
GetModuleHandleA
SetEvent
CloseHandle
Sleep
VirtualProtect
DeleteCriticalSection
SetLastError
ReleaseMutex
lstrlenA
GetVersionExW
GetLastError
CreateMutexA
CreateThread
TlsGetValue
FindClose
user32
EndDialog
EnableWindow
EqualRect
GetMessageA
GetKeyState
DragDetect
CreateMenu
CloseWindow
IsIconic
FlashWindow
DispatchMessageA
DialogBoxParamA
CopyImage
CreateWindowExA
loghours
DialinHoursDialog
LogonScheduleDialog
DirSyncScheduleDialog
DirSyncScheduleDialogEx
DialinHoursDialogEx
advapi32
RegCloseKey
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ