Static task
static1
Behavioral task
behavioral1
Sample
7ba91cd985d366719cb3d000bea8a7d9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7ba91cd985d366719cb3d000bea8a7d9.exe
Resource
win10v2004-20231215-en
General
-
Target
7ba91cd985d366719cb3d000bea8a7d9
-
Size
384KB
-
MD5
7ba91cd985d366719cb3d000bea8a7d9
-
SHA1
6c9de75acbff861b7c8c7e81f85ce389f98ae4da
-
SHA256
79dffcc76eefc63773f7715be810b62f80c2d2ad73f48977e597d4f9d7eef004
-
SHA512
9b88a5de07e99b32f90fb4cb74c87578decfd01e26d29dca0b828e21571abdabd792d4aa187307e8a80c9555a99f8b1c4eb35cdcf3640d4a14d5be622d8b8a06
-
SSDEEP
6144:ftXKglv+Vzs6mXauC8ISk0hXJWSdx1HXzS/Sp9UdjUEFPC:fVlv+JqxCFSPhXrSG+iEE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ba91cd985d366719cb3d000bea8a7d9
Files
-
7ba91cd985d366719cb3d000bea8a7d9.exe windows:4 windows x86 arch:x86
9fb3b0e5b49de5baa8db6b00b7f07149
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
ord696
oleaut32
VariantChangeTypeEx
Sections
Size: 239KB - Virtual size: 896KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 145KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE