Static task
static1
Behavioral task
behavioral1
Sample
07b34341fd45008ba814b0a3b602248c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
07b34341fd45008ba814b0a3b602248c.exe
Resource
win10v2004-20231215-en
General
-
Target
07b34341fd45008ba814b0a3b602248c
-
Size
332KB
-
MD5
07b34341fd45008ba814b0a3b602248c
-
SHA1
e036c5769e4608d8bc0f62a82582e954ae92cce2
-
SHA256
06b9dcec61b89239adf3b6b4ced1a761792137bfac6535831d77899a3074cf56
-
SHA512
9688dc3b12ab12b4fe19e1f1aa993c2024ecccf182e8ede846abe237101211536f0d2a62433216345ae5d23ae58b4a84f826dc6f232e88f1e39e4ffbdeb9cb69
-
SSDEEP
6144:qxAvuniNPsLlho/edwuvlPT5j0X+SSh4gAHrSqWC0AaNSW+Mfprf:EAj3gvlPT5j0X+S5HrSjmib
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07b34341fd45008ba814b0a3b602248c
Files
-
07b34341fd45008ba814b0a3b602248c.exe windows:4 windows x86 arch:x86
c07273eb8e203c62300e8c73813ad231
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
GetNamedPipeInfo
GetMailslotInfo
IsSystemResumeAutomatic
CreateDirectoryA
DeleteAtom
GetFileSize
GetProcessVersion
IsValidCodePage
user32
SendMessageA
Sections
XBTDMNHr Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
beMATzyt Size: 4KB - Virtual size: 630B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yXdlfyBe Size: 276KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gLxtEYEH Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE