Static task
static1
Behavioral task
behavioral1
Sample
7e3d0f82efd8f67d34adba14f1f1917d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7e3d0f82efd8f67d34adba14f1f1917d.exe
Resource
win10v2004-20231215-en
General
-
Target
7e3d0f82efd8f67d34adba14f1f1917d
-
Size
10KB
-
MD5
7e3d0f82efd8f67d34adba14f1f1917d
-
SHA1
b43c044aa10a7938e3b3439f1528e9d14d34620c
-
SHA256
e98d466c39bcf56b330a7e6a7df4312aa2c3dd3198c755305907f0766a71d298
-
SHA512
9baf269407a3a2d9de708b8ba8ee7f0e4fe3eb68084d663655349e966926a59e822e2ea9089314ae0f28cece1814e1508d511581a651da1f6013f074b4fe3173
-
SSDEEP
96:nToaXeOkWmJOSc1Uh/mfYWhn9sERamh21BPJ9o4FhSKUpACB:T1uOk3JOS2Uh/mffPsERaNxJq4qKUpD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e3d0f82efd8f67d34adba14f1f1917d
Files
-
7e3d0f82efd8f67d34adba14f1f1917d.exe windows:4 windows x86 arch:x86
d559b6680349c694e7f9c9e4935bcd9b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
VirtualAlloc
IsDBCSLeadByte
GetModuleFileNameA
GetCurrentThreadId
GetOEMCP
GetCommandLineA
GetLogicalDrives
TlsSetValue
GetDriveTypeW
lstrcmpA
GetSystemDefaultLCID
TlsGetValue
GetUserDefaultLangID
GetACP
CreateProcessInternalA
GetCurrentProcessId
TlsFree
FreeLibrary
GetModuleHandleW
GetCurrentThread
user32
GetSystemMetrics
CloseWindow
RegisterClassA
GetDC
BeginPaint
GetFocus
IsWindowVisible
IsIconic
GetWindowTextA
ShowWindow
GetActiveWindow
UpdateWindow
ReleaseDC
GetWindowDC
GetWindowTextLengthA
GetForegroundWindow
GetClassLongA
GetWindow
GetWindowLongA
imagehlp
FindFileInPath
CheckSumMappedFile
ImageNtHeader
FindDebugInfoFile
BindImage
ImageLoad
sxs
SxsLookupClrGuid
CreateAssemblyCache
CreateAssemblyNameObject
SxsInstallW
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ