Static task
static1
Behavioral task
behavioral1
Sample
07d4c9971250b1bf7d0d5b5c85724d63.exe
Resource
win7-20231215-en
General
-
Target
07d4c9971250b1bf7d0d5b5c85724d63
-
Size
278KB
-
MD5
07d4c9971250b1bf7d0d5b5c85724d63
-
SHA1
d7e34bfe4be4f30045e81b46ebb73bd48992f839
-
SHA256
e5ad38f850edc060b1197bbee24c9674e273d278bf561e61393b6f3bfc889749
-
SHA512
920e1926d18d63fa057d8eb7f065eac31d6514065ba35992d9b4fc440cf1598e80f7834c5ff38006d825ee556bd59449a279763bb287fd510c5c7b5e34d34f0a
-
SSDEEP
6144:VCxmvfr7q8mmMYagKK30zBgjPyJs78Ssy27BP6UJwUuPuTWHHg:0mXq/mMYtUgjPyJs78tN6XUu2TCA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07d4c9971250b1bf7d0d5b5c85724d63
Files
-
07d4c9971250b1bf7d0d5b5c85724d63.exe windows:4 windows x86 arch:x86
f6370b4b330f83c54c3f207fa318e42b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
MulDiv
lstrlenW
GlobalGetAtomNameA
GetVersionExA
GlobalSize
LoadLibraryA
FreeLibrary
MultiByteToWideChar
GetPrivateProfileIntW
GetProcAddress
FindClose
DeleteCriticalSection
Sleep
GetModuleFileNameW
GetTickCount
EnumResourceTypesW
FindFirstFileW
WritePrivateProfileStringW
IsDBCSLeadByteEx
LockResource
InitializeCriticalSection
LoadResource
LoadLibraryW
GetPrivateProfileStringW
GetVersionExW
GetLocaleInfoW
wininet
InternetOpenA
InternetReadFile
InternetTimeToSystemTime
HttpQueryInfoA
InternetCrackUrlA
HttpSendRequestA
InternetConnectA
HttpOpenRequestA
InternetErrorDlg
InternetCloseHandle
InternetTimeFromSystemTime
shell32
DllGetVersion
SHBrowseForFolderA
SHGetPathFromIDListA
SHFileOperationW
SHGetFolderPathW
CommandLineToArgvW
SHGetFileInfoA
ShellExecuteW
ShellExecuteExW
ShellExecuteExA
Shell_NotifyIconA
Sections
.text Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 145KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ