Static task
static1
Behavioral task
behavioral1
Sample
07e29c024b0864c5d23f717052713d14.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
07e29c024b0864c5d23f717052713d14.exe
Resource
win10v2004-20231215-en
General
-
Target
07e29c024b0864c5d23f717052713d14
-
Size
616KB
-
MD5
07e29c024b0864c5d23f717052713d14
-
SHA1
b265d8fb65327464dd8271e92fd587b5c913c37a
-
SHA256
a276da950daf22656c8e8d0ed4992f1dc6628fc395d452e8b5bd128d2575df99
-
SHA512
2033a5813ccc5bc8ab613369c07d26cca984e2f5515ad2510e17a9cf6a65faa1e8824e7e0254c18e1da7976d51cea8bef26c8b916f7d4fb08b4ceabe4d5204c9
-
SSDEEP
12288:Jj0qWhxY4q4DGEYRR22GXJW3QrPPQKE6uqnC8:A3Y4BDG3RsJa/6uq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07e29c024b0864c5d23f717052713d14
Files
-
07e29c024b0864c5d23f717052713d14.exe windows:4 windows x86 arch:x86
f2fd09b08eb5b5b11a87a9e85e419422
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
DrawStatusTextW
ImageList_GetImageInfo
ImageList_SetDragCursorImage
CreatePropertySheetPageW
ImageList_Replace
ImageList_Destroy
GetEffectiveClientRect
ImageList_GetDragImage
ImageList_DrawEx
ImageList_GetIcon
InitCommonControlsEx
gdi32
GetKerningPairsA
ArcTo
CreateSolidBrush
CreateEnhMetaFileW
CloseMetaFile
SetViewportExtEx
ExcludeClipRect
CreateRectRgn
GetRandomRgn
GetGraphicsMode
SelectClipPath
GetTextMetricsW
SetTextCharacterExtra
user32
RegisterClassA
SendInput
SystemParametersInfoA
ToUnicodeEx
CallWindowProcA
AdjustWindowRectEx
CreateIconFromResourceEx
SetPropA
EnumDisplaySettingsExW
EndPaint
PeekMessageW
DdeInitializeW
GetCursorInfo
DrawTextA
SetMessageQueue
GetMenuItemInfoA
ShowWindow
IsCharLowerW
GetDCEx
GetPropW
DlgDirSelectExA
CharPrevA
MessageBoxA
OpenClipboard
PostThreadMessageW
GetScrollPos
BringWindowToTop
LoadImageA
DdeCreateStringHandleA
ToUnicode
CopyAcceleratorTableW
SetWindowTextA
DdeFreeDataHandle
RegisterClassExA
IsChild
RegisterClipboardFormatW
ChangeDisplaySettingsExA
SetDoubleClickTime
SetClassLongW
IsClipboardFormatAvailable
DdeSetUserHandle
GetClipboardOwner
GetFocus
LoadAcceleratorsA
GetScrollInfo
DefWindowProcW
SetRectEmpty
SetWindowsHookExW
GetMenuInfo
GetMessagePos
DdeClientTransaction
IsCharAlphaNumericW
SetClipboardViewer
LookupIconIdFromDirectory
DestroyWindow
DeleteMenu
CharPrevW
GetDlgItem
RegisterDeviceNotificationW
DdeFreeStringHandle
SendNotifyMessageA
DlgDirSelectExW
FindWindowA
CreateWindowExA
DeferWindowPos
EnumDisplayMonitors
SetWindowsHookExA
SetParent
DdeAddData
shell32
SHGetDesktopFolder
kernel32
TlsAlloc
InitializeCriticalSection
FreeEnvironmentStringsW
GetVersion
HeapDestroy
VirtualQuery
GetTickCount
CreateSemaphoreW
GetCurrentThreadId
GetEnvironmentStringsW
UnhandledExceptionFilter
SetFilePointer
GetStartupInfoA
InterlockedExchange
GetStdHandle
LCMapStringA
RtlUnwind
ReadFile
InterlockedIncrement
TerminateProcess
LoadLibraryA
TlsFree
TlsSetValue
OpenWaitableTimerA
HeapAlloc
FreeEnvironmentStringsA
GetStringTypeW
QueryPerformanceCounter
OpenMutexA
CompareStringA
CloseHandle
InterlockedDecrement
GetCommandLineA
GetEnvironmentStrings
SetEnvironmentVariableA
VirtualFree
GetCPInfo
CreateEventA
MultiByteToWideChar
ExpandEnvironmentStringsW
GetCurrentProcess
IsBadWritePtr
LeaveCriticalSection
HeapFree
GetOEMCP
CreateMailslotW
GetSystemTimeAsFileTime
HeapCreate
CreateMutexA
SetHandleCount
VirtualAlloc
LCMapStringW
GetSystemTime
GetCurrentThread
GetFileType
GetACP
WriteFile
EnterCriticalSection
GetProcAddress
GetLocalTime
WideCharToMultiByte
FlushFileBuffers
GetModuleFileNameA
GetModuleHandleA
ExitProcess
TlsGetValue
RtlFillMemory
GetLastError
HeapReAlloc
CompareStringW
SetStdHandle
SetLastError
GetStringTypeA
DeleteCriticalSection
GetCurrentProcessId
GetTimeZoneInformation
Sections
.text Size: 152KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 268KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ