Static task
static1
Behavioral task
behavioral1
Sample
f7f3e1a7184524525c7acfc20b406c8f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f7f3e1a7184524525c7acfc20b406c8f.exe
Resource
win10v2004-20231215-en
General
-
Target
f7f3e1a7184524525c7acfc20b406c8f
-
Size
387KB
-
MD5
f7f3e1a7184524525c7acfc20b406c8f
-
SHA1
fb51c00f5beb822391a854ae168e310727ed113f
-
SHA256
e1996d051705bd795980408c33b02339b995f14bb14be7d569646355c023bc41
-
SHA512
674cd77534e5fa28dfd31a244217144a763a1a9a99d5a1f81da1cfe009dd8597b61477e8c9da45ce157b65c9948a129fe50c1cc2f759c327d9ac1789f0fb8983
-
SSDEEP
12288:Ez8yqHtfYvqCWSknzD1gIaEt/oAMwnP9AXCh82Jk:Ewx3SLyO2J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7f3e1a7184524525c7acfc20b406c8f
Files
-
f7f3e1a7184524525c7acfc20b406c8f.exe windows:3 windows x86 arch:x86
11315cd97edde1a11b18b2249cdd4da2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
gdi32
PolyBezier
RectVisible
GetNearestColor
FillRgn
SetDIBits
UnrealizeObject
SelectPalette
GetTextExtentPoint32W
CreateICW
GetTextColor
CreateDIBitmap
GetNearestPaletteIndex
RoundRect
ResizePalette
SetBkColor
Escape
ExtFloodFill
DeleteDC
CreatePolygonRgn
SetDIBColorTable
CreatePen
GetPaletteEntries
GetStockObject
StretchBlt
LPtoDP
SetStretchBltMode
SetPaletteEntries
RestoreDC
SetMapMode
CreatePalette
Polygon
TranslateCharsetInfo
Rectangle
GetDIBits
SetBkMode
SetDIBitsToDevice
CreateCompatibleBitmap
DeleteObject
GetDIBColorTable
Ellipse
GetPixel
SaveDC
GetTextMetricsW
SelectObject
CreateHalftonePalette
CreatePatternBrush
GetBkMode
LineTo
user32
UpdateWindow
DispatchMessageA
ShowWindow
DefWindowProcA
GetMessageA
TranslateMessage
SendMessageA
RegisterClassExA
DestroyWindow
CreateWindowExA
kernel32
GetACP
GetExitCodeThread
GetFileAttributesW
GlobalUnlock
GetTickCount
GlobalAlloc
GetThreadLocale
TerminateProcess
GetModuleHandleA
lstrcpynW
GetCurrentProcess
HeapAlloc
lstrcmpW
lstrlenA
GetTimeFormatW
CloseHandle
lstrcatW
GetStartupInfoW
UnhandledExceptionFilter
GetFileTime
InterlockedDecrement
VirtualFree
InterlockedExchange
GetFileSize
GetSystemTimeAsFileTime
SetErrorMode
GetProcessHeap
FileTimeToLocalFileTime
HeapSize
FindFirstFileW
GetProcessHeaps
CreateFileW
FileTimeToSystemTime
lstrcmpiW
GetNumberFormatW
LoadLibraryW
GetProcAddress
LocalAlloc
VirtualAlloc
FindClose
SetUnhandledExceptionFilter
GetDateFormatW
GetModuleHandleW
InterlockedIncrement
GlobalReAlloc
msvcrt
_controlfp
_itow
_ltow
_wcsicmp
_adjust_fdiv
_XcptFilter
_except_handler3
wcscat
__setusermatherr
_cexit
_onexit
_c_exit
__wargv
_wtoi
__p__fmode
_wcsdup
wcstok
_CxxThrowException
_wcmdln
_wtol
rand
_exit
_beginthreadex
Sections
.text Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 181KB - Virtual size: 824KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ