Static task
static1
Behavioral task
behavioral1
Sample
7f5eabf072d694ea17146bfdccdbc212.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7f5eabf072d694ea17146bfdccdbc212.exe
Resource
win10v2004-20231215-en
General
-
Target
7f5eabf072d694ea17146bfdccdbc212
-
Size
62KB
-
MD5
7f5eabf072d694ea17146bfdccdbc212
-
SHA1
e50407cdd376feb22bf784ddf1aac3ef5d00debe
-
SHA256
62a7ff5232fe9c43c1aaa62c467c797c9065c8702e1b41b60839bfc9de7afab9
-
SHA512
3c79e5531ee6b0f88e9a61a7c00b8268b56ab017fa078d3aab1ba6bc6020d57b18078a6445252ce56154bd78eab36b40aaac8b505b94147583cb395f5bdbe1c7
-
SSDEEP
1536:eBmMyMWO0SECuNbWvfqxMgP814cs0J6O:XOZHgk/VB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f5eabf072d694ea17146bfdccdbc212
Files
-
7f5eabf072d694ea17146bfdccdbc212.exe windows:4 windows x86 arch:x86
691f1193f16065947032ace3a2329e55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
fabs
comctl32
InitCommonControls
user32
IsChild
gdi32
BitBlt
ole32
CoInitialize
shell32
ShellExecuteExA
shlwapi
PathQuoteSpacesA
Sections
.MPRESS1 Size: 20KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE