Static task
static1
Behavioral task
behavioral1
Sample
7dbeaa678f353636b5074e56f9c6bc29.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7dbeaa678f353636b5074e56f9c6bc29.exe
Resource
win10v2004-20231215-en
General
-
Target
7dbeaa678f353636b5074e56f9c6bc29
-
Size
476KB
-
MD5
7dbeaa678f353636b5074e56f9c6bc29
-
SHA1
870e6878a30361ce1cadf9beed8afe579c9c62bb
-
SHA256
770410e1d4bdaf4c60987e8e014aea186f6c4fb9a591d623b98ee0af8f9f7282
-
SHA512
eb5e0d7fbd705c51d04a9191c99dfd4782c84d9f7854438f2266c354ce8accad271cb929a9be8bd1649d199606fea36f872161fee38c1356e498b334838a8524
-
SSDEEP
12288:/xL9Wv+kybKasX2LzSf5hiAq/YNRgxRu5E:/DWv+XOpX2Sf5S/YNR0kE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7dbeaa678f353636b5074e56f9c6bc29
Files
-
7dbeaa678f353636b5074e56f9c6bc29.exe windows:4 windows x86 arch:x86
c9942c5cbe99e9a06f4770421a934633
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
RegCloseKey
comctl32
PropertySheet
gdi32
LineTo
iphlpapi
GetAdaptersInfo
oleaut32
VarCmp
shell32
SHGetFileInfo
shlwapi
PathStripPathW
user32
GetDC
version
VerQueryValueA
wininet
InternetOpenA
ole32
DoDragDrop
zlib1
crc32
Sections
.MPRESS1 Size: 450KB - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE