Static task
static1
Behavioral task
behavioral1
Sample
7c9762e796301f990d2db94b9b2d1ef1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7c9762e796301f990d2db94b9b2d1ef1.exe
Resource
win10v2004-20231222-en
General
-
Target
7c9762e796301f990d2db94b9b2d1ef1
-
Size
452KB
-
MD5
7c9762e796301f990d2db94b9b2d1ef1
-
SHA1
95528b2cd4b0d4035ec65104e12db9935042a3c8
-
SHA256
e9c0d6f286044a3af8fad4e1c03e4881716ad82919d52ed66de79ae8cc77ffa5
-
SHA512
e419e472056963866e1942852aa7f7d8373635aff6241f9efe4d3ee148c3b70119665a986b0a27024ff226d7e7040ca81ca19e543de69b97f3f04ebee0ab1c1c
-
SSDEEP
6144:iD1s6WBIREZjLAOjGWaQEnt4qaElK9GaUZJ6fhyynQmsiEfPBkgdRqPPbzGqgF:iD5234lQDUnQyHiCBVfQPntq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c9762e796301f990d2db94b9b2d1ef1
Files
-
7c9762e796301f990d2db94b9b2d1ef1.exe windows:4 windows x86 arch:x86
ea64ff8a1fbbb4b738eeadc42251c1f5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LoadLibraryA
LCMapStringA
ExitProcess
CreateFileA
CloseHandle
user32
CloseWindow
SetWindowLongA
CharLowerBuffA
CreateWindowExA
wsprintfA
advapi32
RegOpenKeyA
RegEnumKeyA
RegSetValueA
RegCloseKey
RegEnumValueA
RegDeleteKeyA
RegQueryValueA
RegDeleteValueA
RegCreateKeyA
Sections
.text Size: 425KB - Virtual size: 428KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ