Static task
static1
Behavioral task
behavioral1
Sample
7c3347d6a3b51833d4ab73deaaaa859a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7c3347d6a3b51833d4ab73deaaaa859a.exe
Resource
win10v2004-20231215-en
General
-
Target
7c3347d6a3b51833d4ab73deaaaa859a
-
Size
294KB
-
MD5
7c3347d6a3b51833d4ab73deaaaa859a
-
SHA1
0c412c55591e757b1e9badb1cd10bb35917572d7
-
SHA256
e0890946fb8766a4220d2a99b4180d222857c1d1f9941622ef1e0d5f44f8081d
-
SHA512
c18becd5652f3a2c623b2374c7b46b5fd41e5bda038d648cfc2fe016bf747c70558af236c0b76f48bbdede0c3d0afceec5b3790c031f9be8fbd79a93f2a3b9d0
-
SSDEEP
6144:+HMCNxDAKHhmgsvorxhC7JCEl2eecFlGWrAZV+2WAX/OqGcu/jGjHEM:iDggsvow7J72enGMAZV+2Jm06Gj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c3347d6a3b51833d4ab73deaaaa859a
Files
-
7c3347d6a3b51833d4ab73deaaaa859a.exe windows:4 windows x86 arch:x86
bcaad6cbf7dae17d891fe556dd0d3d5b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetProfileIntA
GetStdHandle
VirtualProtect
GetVersion
TlsFree
HeapReAlloc
WaitForSingleObject
TlsGetValue
GetModuleHandleA
HeapWalk
GetConsoleCP
lstrlenA
LoadLibraryA
CloseHandle
GlobalUnlock
GetAtomNameA
CompareFileTime
InterlockedExchange
FindAtomA
GetACP
user32
TranslateMessage
GetWindowTextA
LoadIconA
PaintDesktop
InsertMenuA
GetMenu
GetMenuStringA
GetDlgItem
GetScrollRange
DialogBoxParamA
InflateRect
ModifyMenuA
SubtractRect
CreateCaret
EnableScrollBar
DestroyMenu
EqualRect
PostQuitMessage
SetWindowPos
UpdateWindow
DispatchMessageA
SetPropA
CopyRect
PostMessageA
ShowWindow
MessageBoxA
GetKeyboardLayout
msi
MsiEnumProductsA
MsiGetMode
MsiDoActionA
MsiEnumClientsA
MsiCloseHandle
ws2_32
WSAAccept
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ