Static task
static1
Behavioral task
behavioral1
Sample
07ceaf8fd3e0b20673f4eb68695c71c6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
07ceaf8fd3e0b20673f4eb68695c71c6.exe
Resource
win10v2004-20231222-en
General
-
Target
07ceaf8fd3e0b20673f4eb68695c71c6
-
Size
86KB
-
MD5
07ceaf8fd3e0b20673f4eb68695c71c6
-
SHA1
1721ab7b2344a0cff29f23a2b43274ed3d34e115
-
SHA256
b2387fbce32ecab6ca9835ce3351b514b645853c035d22a3fc4a069f6442c9ff
-
SHA512
eabc6f650b7515642f585185f9c5528fc884dd7ec191d37df922110cbe35d6146954e3239c46b6e407987d806e7bfdc3022d98ec3de56fbe0f7ce9cbaef5d0ef
-
SSDEEP
1536:FNQgXEEjA/CUNDj71HDa4AAG0K7E+LoDJYTJZQP5dEhQV5AU1u:FNrXEEUfNq9E+0+7QhdEha5Pu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07ceaf8fd3e0b20673f4eb68695c71c6
Files
-
07ceaf8fd3e0b20673f4eb68695c71c6.exe windows:4 windows x86 arch:x86
5190c48524d010bf5a5726d8e2cf2d26
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
SetFilePointer
GetLastError
ReadFile
WriteFile
GetFileAttributesA
CreateFileA
CreateDirectoryA
lstrlenA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SystemTimeToFileTime
FileTimeToDosDateTime
HeapAlloc
HeapFree
FindFirstFileA
GetTempPathA
GetWindowsDirectoryA
GetSystemDirectoryA
GetCurrentDirectoryA
ExitProcess
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
lstrcatA
lstrcmpA
IsDBCSLeadByte
lstrcpyA
FormatMessageA
GetProcessHeap
FileTimeToLocalFileTime
FindClose
LocalFree
user32
GetMessageA
PeekMessageA
wsprintfA
GetDlgItem
SetWindowTextA
TranslateMessage
EndDialog
DispatchMessageA
MoveWindow
PostMessageA
SendMessageA
CharNextA
DialogBoxParamA
GetWindowRect
GetSystemMetrics
LoadStringA
GetDlgItemTextA
MessageBoxA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shell32
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
ole32
CoInitialize
CoUninitialize
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ