Static task
static1
Behavioral task
behavioral1
Sample
07738347e4403331fb2e545869ab722e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
07738347e4403331fb2e545869ab722e.exe
Resource
win10v2004-20231222-en
General
-
Target
07738347e4403331fb2e545869ab722e
-
Size
704KB
-
MD5
07738347e4403331fb2e545869ab722e
-
SHA1
201781d200e2785be4803ba9a2828ee13c9ad577
-
SHA256
e012c5e56599aa5f2086fe15f5d5a10bc8ad7ff5fc5e6ce5ef35bf3e41eba063
-
SHA512
43012e839782c66120e5af0d1332c44304537b9f881747566ac2f62ceca659de7a5f553bed13e03bd8e0bdd34e6784bb5097ba61873b1c321fa030c402d69e17
-
SSDEEP
6144:ODSn6F3WzgzL8OwaYOZukC3aM82YcRWmh7s94NEq+pU5sSh7frRcoZS/fbF25q9U:UrxzLZwaVCKMGcK94N9rh7jNS/56
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07738347e4403331fb2e545869ab722e
Files
-
07738347e4403331fb2e545869ab722e.exe windows:4 windows x86 arch:x86
6a85fd2b0974583ef14bc33e3d5cd999
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
CreateToolhelp32Snapshot
GetModuleHandleA
Process32NextW
Process32FirstW
GetProcAddress
lstrlenA
ExitProcess
SetFilePointer
CreateProcessW
Sleep
TerminateProcess
ReadFile
LoadLibraryA
OpenThread
OpenMutexA
CreateMutexA
CloseHandle
IsDebuggerPresent
VirtualAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
VirtualFree
IsDebuggerPresent
user32
MessageBoxA
CharLowerA
Sections
.text Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RahamX Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Raham Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RahamVM Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SepantaM Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE