Static task
static1
Behavioral task
behavioral1
Sample
7b5cf9d8a58d051bc36f448c770dceb7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7b5cf9d8a58d051bc36f448c770dceb7.exe
Resource
win10v2004-20231222-en
General
-
Target
7b5cf9d8a58d051bc36f448c770dceb7
-
Size
135KB
-
MD5
7b5cf9d8a58d051bc36f448c770dceb7
-
SHA1
54c0a80ae05a29c32e919ab9290427370b9a4820
-
SHA256
c264d8b5fb9769dea39f940faa29b4122c65c0b1433a669559a1527c7b643d6d
-
SHA512
51ca8e334d3cfeb6b6a957986d209cc0a19f56b75091a5fbf806d33bc238ff8e7a7d86a9b804666c753e9a64572503410cb06adeb338ba139574909d078e6f89
-
SSDEEP
3072:Q0raRWszRp9Vqe9NHoPzvTkxQi0QAeQ8J9avEfVKq:trSXtMe9NHo7TkxOPYavBq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7b5cf9d8a58d051bc36f448c770dceb7
Files
-
7b5cf9d8a58d051bc36f448c770dceb7.exe windows:4 windows x86 arch:x86
3502d36bb44f7c3edfee311a64ad9926
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeConsole
GetModuleFileNameA
FreeConsole
GetLastError
FreeConsole
GetFileSize
FreeConsole
GetCPInfo
FreeConsole
GetLastError
FreeConsole
lstrcatA
FreeConsole
lstrcmpA
FreeConsole
GetFileAttributesA
FreeConsole
HeapFree
FreeConsole
lstrcpyA
GetCommandLineW
WideCharToMultiByte
FreeLibrary
GetCommandLineA
HeapFree
GetModuleFileNameA
GetStringTypeW
GetFileType
GlobalAlloc
lstrcpynA
GetLogicalDrives
lstrcmpiA
GetLastError
GetLastError
GetLocalTime
GetFileAttributesA
HeapAlloc
Sleep
DeleteFileA
user32
CloseWindow
GetDlgItem
AppendMenuA
GetMenu
GetWindowTextA
LoadMenuA
CopyImage
DrawIcon
DrawTextA
GetCursor
BlockInput
InsertMenuA
GetFocus
CopyIcon
AppendMenuW
CreateIcon
GetWindowTextLengthA
IsMenu
DialogBoxParamA
DialogBoxParamW
GetMenu
GetWindowTextLengthA
LoadMenuA
LoadCursorA
IsMenu
DialogBoxParamA
CopyRect
CopyImage
DialogBoxParamW
CopyIcon
IsWindow
BlockInput
AppendMenuA
DrawIcon
GetDlgItem
InsertMenuA
CreateIcon
GetWindowTextA
Sections
.tadt Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edada Size: 1024B - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idada Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ