Static task
static1
Behavioral task
behavioral1
Sample
7b80b3a1abbd22038e36abed811d228d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7b80b3a1abbd22038e36abed811d228d.exe
Resource
win10v2004-20231215-en
General
-
Target
7b80b3a1abbd22038e36abed811d228d
-
Size
396KB
-
MD5
7b80b3a1abbd22038e36abed811d228d
-
SHA1
b132df154d845264e054a69f16d0091d8e6794ce
-
SHA256
e01b71b7f095002b9d35d405272b52a77ed06a1d9814ed0726a48b145b3a5776
-
SHA512
a4c9df2d8e7430e63d20a47da7f06ac0229eee8c333a58ca9998dcf35d469e0221923ee96efe868f4c2ef1c9c117ddb43894cb5c5a476852d55b5169dd721f6a
-
SSDEEP
6144:Lo6wLmbn3he+B49XUxOp8vHeucAJjaIN7svxosCxVPKjH9:U6wLmrx7iyxOp8fKAAIu3jH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7b80b3a1abbd22038e36abed811d228d
Files
-
7b80b3a1abbd22038e36abed811d228d.exe windows:4 windows x86 arch:x86
b930bdb75ac13c03e4578ad969e75485
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_GetImageInfo
CreatePropertySheetPage
InitCommonControlsEx
ImageList_GetFlags
CreateStatusWindow
ImageList_GetIconSize
DestroyPropertySheetPage
ImageList_Duplicate
ImageList_SetBkColor
ImageList_Read
ImageList_DragMove
gdi32
GdiSetBatchLimit
CreateDCW
GetObjectA
SetLayout
DeleteDC
AngleArc
GetDeviceCaps
CreateMetaFileW
ResetDCA
SetSystemPaletteUse
kernel32
GetProcessHeap
GetEnvironmentStrings
SetConsoleMode
GetEnvironmentStringsW
SetLocalTime
GetProcAddress
GetACP
WriteConsoleA
FreeEnvironmentStringsA
GetStringTypeW
GetUserDefaultLCID
GetExitCodeThread
GetCurrentThread
LCMapStringA
IsDebuggerPresent
FlushConsoleInputBuffer
InitializeCriticalSection
SetConsoleActiveScreenBuffer
OpenMutexA
WideCharToMultiByte
FlushFileBuffers
GetStartupInfoA
CreateDirectoryExA
CompareStringW
SetConsoleScreenBufferSize
FreeEnvironmentStringsW
SetConsoleCtrlHandler
SetHandleCount
TlsGetValue
RtlUnwind
VirtualAlloc
SetFileAttributesW
GetStringTypeA
TlsAlloc
QueryPerformanceCounter
ReadConsoleInputW
SetEnvironmentVariableA
GetSystemTimeAsFileTime
Sleep
GetEnvironmentStringsA
GetModuleFileNameA
CloseHandle
HeapFree
GetTickCount
GetConsoleCP
IsValidLocale
UnhandledExceptionFilter
HeapCreate
GetLocaleInfoW
ReadFile
CompareStringA
TerminateProcess
CopyFileA
CreateMutexA
RtlZeroMemory
LockFileEx
GetConsoleTitleA
GetTimeFormatA
LCMapStringW
GetThreadLocale
CreateSemaphoreW
GetConsoleOutputCP
ExitProcess
HeapDestroy
LeaveCriticalSection
GetStdHandle
GetCurrentThreadId
InterlockedExchange
GetCommandLineA
HeapSize
GetOEMCP
GetCurrentProcessId
GetCurrentProcess
TlsFree
CommConfigDialogA
MoveFileExW
FindResourceExA
InterlockedDecrement
CreateFileA
WriteFile
MultiByteToWideChar
SetUnhandledExceptionFilter
GetTempFileNameA
TlsSetValue
WriteConsoleW
GetFileType
GetFileSize
GetLocaleInfoA
DeleteCriticalSection
VirtualQuery
GetCPInfo
GetModuleHandleA
FileTimeToDosDateTime
EnterCriticalSection
EnumSystemLocalesA
GlobalFlags
GetTempPathW
FreeLibrary
GetLastError
LoadLibraryA
GetVersionExA
SetLastError
HeapReAlloc
GetThreadTimes
SetFilePointer
GetTimeZoneInformation
VirtualFree
InterlockedIncrement
IsValidCodePage
CreatePipe
SetStdHandle
GetDateFormatA
RaiseException
GetConsoleMode
HeapAlloc
user32
PtInRect
AppendMenuA
DrawFrameControl
SetWindowPos
IsCharLowerA
GetClipboardFormatNameA
RealGetWindowClass
GetKeyboardLayoutNameW
DdeCmpStringHandles
wsprintfA
RegisterClassA
UpdateWindow
GetWindowRgn
InsertMenuA
GetMenuItemCount
CharPrevA
CreateWindowExW
LoadIconW
CharPrevW
GetWindowThreadProcessId
CreatePopupMenu
CopyAcceleratorTableW
DdeInitializeW
EnumDisplaySettingsW
PostThreadMessageA
LoadStringW
MessageBoxExW
SetLastErrorEx
SetRectEmpty
TranslateMessage
RegisterClassExA
EditWndProc
wvsprintfW
RemoveMenu
GetTopWindow
GrayStringW
ShowWindow
CreateCaret
CharLowerW
LoadAcceleratorsW
DrawFrame
WaitForInputIdle
TileWindows
SetDlgItemInt
GetMessageA
DrawStateA
ExcludeUpdateRgn
DdeInitializeA
KillTimer
EnumDesktopsA
GetDlgCtrlID
DdeCreateStringHandleA
LoadIconA
ScrollWindow
CascadeChildWindows
GetClassNameA
SetClassWord
GetKBCodePage
DdeQueryConvInfo
GetScrollPos
Sections
.text Size: 134KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ