Static task
static1
Behavioral task
behavioral1
Sample
07c7c257171ae1427fb32b27657d90c0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
07c7c257171ae1427fb32b27657d90c0.exe
Resource
win10v2004-20231215-en
General
-
Target
07c7c257171ae1427fb32b27657d90c0
-
Size
543KB
-
MD5
07c7c257171ae1427fb32b27657d90c0
-
SHA1
e1fee0e618e3102aafe16e718613415412533e98
-
SHA256
d39cea3f252e6d6cc3efa0551d6c7fc320864d748f5ec5ab342b11a976353f8d
-
SHA512
ba6809fc558b8db8be183dce6c190595121571bc62c9007b5d6749161190cd393515f3c9b02d77ff4bbb1f66fd40fddf05ae0d6db4a0792422622b7043763561
-
SSDEEP
12288:edjvE1nHBKHLMjbTeiL0jaobmpf9A1TjTQwxsmF9lcwrHtY:e1vEtSQjGzpYf9A5TQesxCG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07c7c257171ae1427fb32b27657d90c0
Files
-
07c7c257171ae1427fb32b27657d90c0.exe windows:4 windows x86 arch:x86
3a1044b64029e793192363af28bd403c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterClassA
CreateWindowExA
ExitWindowsEx
GetLastActivePopup
ShowWindow
RegisterClassExA
SetClassLongW
GetMessagePos
GetKeyboardLayoutNameW
DestroyAcceleratorTable
ClientToScreen
DestroyMenu
SetUserObjectInformationA
DestroyCaret
MessageBoxW
GetWindowTextA
DefWindowProcA
DestroyWindow
OemKeyScan
DdeGetLastError
CharPrevExA
FrameRect
kernel32
SetThreadAffinityMask
GetLastError
LCMapStringW
TlsSetValue
LoadLibraryA
SetLastError
GetFullPathNameA
GetCPInfo
GetStringTypeW
GetEnvironmentStringsW
HeapReAlloc
MapViewOfFile
HeapCreate
EnterCriticalSection
GetLocaleInfoW
FreeLibrary
GetProcessHeap
HeapAlloc
GetConsoleCP
lstrcatA
CompareStringA
GetDateFormatA
GetModuleFileNameA
CreateEventA
GetCommandLineW
WriteFile
ReadFile
GetCurrencyFormatW
HeapFree
CloseHandle
WideCharToMultiByte
GetConsoleMode
LeaveCriticalSection
GetVersionExA
GetStringTypeExW
IsDebuggerPresent
EnumResourceNamesA
GetCurrentProcess
GetTickCount
EnumSystemLocalesA
IsValidLocale
ExitProcess
GetStringTypeA
GetEnvironmentStrings
GetModuleFileNameW
GetModuleHandleA
GetSystemTimeAsFileTime
TlsFree
GetACP
InitializeCriticalSection
GetCurrentProcessId
GetStartupInfoW
CreateMutexA
GetCurrentThread
GetProcAddress
FindFirstFileA
TerminateProcess
VirtualQuery
InterlockedDecrement
RtlUnwind
FlushFileBuffers
GetCommandLineA
GlobalUnlock
CreateProcessA
VirtualAlloc
UnhandledExceptionFilter
GetTimeZoneInformation
WriteConsoleA
GetTimeFormatA
HeapSize
GetUserDefaultLangID
SetHandleCount
Sleep
GetOEMCP
lstrcatW
TlsGetValue
QueryPerformanceCounter
TlsAlloc
FlushConsoleInputBuffer
GetCurrentDirectoryA
SetConsoleCtrlHandler
GetUserDefaultLCID
MultiByteToWideChar
HeapDestroy
IsValidCodePage
SetFilePointer
GetStdHandle
FreeEnvironmentStringsA
GetFileType
CompareStringW
GetCurrentThreadId
FreeEnvironmentStringsW
VirtualFree
DeleteAtom
SetUnhandledExceptionFilter
GetLocaleInfoA
SetEnvironmentVariableA
LCMapStringA
InterlockedExchange
WriteConsoleW
SetComputerNameA
DeleteCriticalSection
GetConsoleOutputCP
OpenMutexA
SetStdHandle
CreateFileA
InterlockedIncrement
GetTempFileNameW
GetStartupInfoA
comctl32
ImageList_SetDragCursorImage
ImageList_DragMove
ImageList_Remove
ImageList_SetBkColor
ImageList_Create
InitMUILanguage
DestroyPropertySheetPage
ImageList_SetOverlayImage
InitCommonControlsEx
ImageList_Draw
ImageList_SetImageCount
CreateToolbarEx
ImageList_LoadImageW
ImageList_Merge
ImageList_Write
wininet
FtpDeleteFileW
InternetCanonicalizeUrlA
Sections
.text Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ