Static task
static1
Behavioral task
behavioral1
Sample
7ae1053a7ec3d458fdf1121c61de9d9b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7ae1053a7ec3d458fdf1121c61de9d9b.exe
Resource
win10v2004-20231222-en
General
-
Target
7ae1053a7ec3d458fdf1121c61de9d9b
-
Size
862KB
-
MD5
7ae1053a7ec3d458fdf1121c61de9d9b
-
SHA1
14c177185cdf3edfcd38c97ac526e18aa881be45
-
SHA256
c06ef2cf19df50c684d3717fc218a4a06462adc75d89e54e790d4c7bc7a4b940
-
SHA512
02381c068997e93729fdc6969c950a008e84c79bf6b1bd3c5af9487220d543b14aafae9599de6fff1362b1ca0811d72d9d84debe19f2013e7f565ae61e98674c
-
SSDEEP
24576:nkSCYBE+eI//FHsjSzmpVWk1VU3L3QZEimi7yf:kS5y+J//VsjampVW8UMZMiK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ae1053a7ec3d458fdf1121c61de9d9b
Files
-
7ae1053a7ec3d458fdf1121c61de9d9b.exe windows:4 windows x86 arch:x86
015625e29014b5f4d71bc7976caa7942
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetHandleCount
GetVersion
GetSystemInfo
GlobalHandle
GlobalLock
VirtualProtect
QueryPerformanceCounter
InterlockedExchange
GetStartupInfoA
GetSystemDirectoryA
RtlUnwind
lstrcatA
GlobalAlloc
GetEnvironmentStringsW
WideCharToMultiByte
GetVersionExA
HeapReAlloc
VirtualFree
VirtualAlloc
FreeLibrary
GetCurrentProcessId
HeapFree
GetModuleHandleA
lstrlenA
Sleep
GetEnvironmentStrings
LCMapStringW
_lread
GetStringTypeW
GetStringTypeW
GetOEMCP
GetModuleFileNameA
LCMapStringA
GetProcAddress
VirtualQuery
GlobalFree
GetCPInfo
OpenFile
HeapCreate
GetLocaleInfoA
LoadLibraryA
GetCommandLineA
GetStdHandle
GetACP
ExitProcess
GetStringTypeA
GetCurrentThreadId
HeapAlloc
GlobalUnlock
GetFileType
FreeEnvironmentStringsA
GetTickCount
GetProcessHeap
HeapDestroy
FreeEnvironmentStringsW
_lclose
MultiByteToWideChar
GetCurrentProcess
user32
SetWindowLongA
LoadStringA
wsprintfA
GetWindowLongA
GetClientRect
GetParent
MoveWindow
SendDlgItemMessageA
GetWindowRect
MessageBoxA
GetDesktopWindow
OemToCharA
EndDialog
ClientToScreen
DialogBoxParamA
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 788KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ