Static task
static1
Behavioral task
behavioral1
Sample
7bf796c53ded8302e0b359b43b8d9e32.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7bf796c53ded8302e0b359b43b8d9e32.exe
Resource
win10v2004-20231215-en
General
-
Target
7bf796c53ded8302e0b359b43b8d9e32
-
Size
148KB
-
MD5
7bf796c53ded8302e0b359b43b8d9e32
-
SHA1
4b49638779dc7d17ef9d57befe534c6b03ff7d67
-
SHA256
e7850c0a8f5f9170429bd2220cfc6d5dd17667017fdbf8746e9bf0829bf1d0ad
-
SHA512
36acc832c4cb78dae411270d1e3ee2ac6cc8265c95875870425f3760eaa9c1107284022828168c67e556cd5dd6c5c27d9806dbf2ef52864e03a0f643741b311f
-
SSDEEP
3072:CTlvZ4nDbfagCqKZk5yY//kGKVBICZVF/QhYpmH7zwb8WSAofrWlXz:CTlh4nDWgRAkP7kVOdH7UGap
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7bf796c53ded8302e0b359b43b8d9e32
Files
-
7bf796c53ded8302e0b359b43b8d9e32.exe windows:4 windows x86 arch:x86
4a4d034e7418ae8b25b6f9177a441e98
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
GetWindowsDirectoryA
FreeResource
WriteFile
GetTickCount
GetTempPathA
LockResource
LoadResource
SizeofResource
FindResourceA
MoveFileExA
SetFilePointer
CreateFileA
CloseHandle
ReleaseMutex
GetLastError
CreateMutexA
GetModuleFileNameA
GetCurrentThreadId
GetModuleHandleA
GetFileAttributesA
GetStartupInfoA
DeleteFileA
GetSystemDirectoryA
ReadFile
CreateProcessA
user32
GetInputState
GetMessageA
wsprintfA
PostThreadMessageA
advapi32
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
msvcrt
__setusermatherr
_controlfp
strstr
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 236B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 141KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sys Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE