Static task
static1
Behavioral task
behavioral1
Sample
07819d1664cbd1d7613fbacce96e7f7a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
07819d1664cbd1d7613fbacce96e7f7a.exe
Resource
win10v2004-20231215-en
General
-
Target
07819d1664cbd1d7613fbacce96e7f7a
-
Size
427KB
-
MD5
07819d1664cbd1d7613fbacce96e7f7a
-
SHA1
800653f67e84206932220f7494b4c0f3c5ca2436
-
SHA256
ac858ceee4f8dec5fbdc6960712b7c0fef297dc37805b87e577bf0a2fe6eea3f
-
SHA512
fc1babcb10618f3be0f3e41e52c4a14244f04e8b80e1bddd278d4cb7e7a301928b355dbc9cabfb5daf8c8bb4cc0a82927343f4c2b8ea73c92a34805157c720a2
-
SSDEEP
12288:pASa02pIZiQ27xS9uNV7SkfDCcrCzaCsy7lv22R+a:+Svhbw7Ff+UCWM122R+a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07819d1664cbd1d7613fbacce96e7f7a
Files
-
07819d1664cbd1d7613fbacce96e7f7a.exe windows:4 windows x86 arch:x86
0749b49c102905fa7fed32b904cf7195
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDebuggerPresent
SetConsoleCtrlHandler
SetHandleCount
GetCurrentThread
GetProcAddress
SetLastError
HeapReAlloc
Sleep
GetDateFormatA
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
HeapAlloc
FreeEnvironmentStringsA
GetStdHandle
UnhandledExceptionFilter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedIncrement
CompareStringA
TlsSetValue
GetTimeFormatA
LCMapStringW
GetEnvironmentStringsW
LCMapStringA
TlsAlloc
EnumSystemLocalesA
HeapDestroy
DeleteCriticalSection
LoadLibraryExA
ExitProcess
GetTickCount
CompareStringW
LeaveCriticalSection
HeapFree
GetLocaleInfoW
GetModuleFileNameA
IsValidCodePage
LoadLibraryA
QueryPerformanceCounter
GetLocaleInfoA
VirtualAlloc
LockFile
GetEnvironmentStrings
VirtualQuery
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
RtlUnwind
GetModuleHandleW
GetStringTypeA
GetUserDefaultLCID
VirtualFree
GetCommandLineA
SetEnvironmentVariableA
GetFileType
GetSystemTimeAsFileTime
GetOEMCP
GetACP
FillConsoleOutputCharacterW
GetStartupInfoA
GetStringTypeW
FreeLibrary
WriteFile
TlsFree
IsValidLocale
FreeEnvironmentStringsW
GetTimeZoneInformation
WideCharToMultiByte
EnterCriticalSection
MultiByteToWideChar
GetCPInfo
HeapCreate
EnumCalendarInfoW
InterlockedExchange
InterlockedDecrement
HeapSize
GetLastError
TlsGetValue
wininet
InternetErrorDlg
Sections
.text Size: 145KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 276KB - Virtual size: 307KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ