Static task
static1
Behavioral task
behavioral1
Sample
07e2e193bbdb37927a4d890a6a363b03.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
07e2e193bbdb37927a4d890a6a363b03.exe
Resource
win10v2004-20231215-en
General
-
Target
07e2e193bbdb37927a4d890a6a363b03
-
Size
60KB
-
MD5
07e2e193bbdb37927a4d890a6a363b03
-
SHA1
d95748cbf0cbd479171dac4676366c075d672f30
-
SHA256
50c8762abea5c04652d29c421b18ea5c0a65338db97db7b02eedbefeacf4fb52
-
SHA512
f61b4692d9c7adce56c6d1695134b04c8523ee69ea8b490c821a2ddd8eb25b4eb276e088c1807ce3b51e6c32ec54d47035b27711757c134d8adf66b4fae66270
-
SSDEEP
768:ncHv2s7m9Q6Xc5He64mPTrSAUgZGX2El/cDW5:cHv77nocxlDPTrfAJc6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07e2e193bbdb37927a4d890a6a363b03
Files
-
07e2e193bbdb37927a4d890a6a363b03.exe windows:4 windows x86 arch:x86
a7d61675d190488474eb30e9a051cbd0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetFileTime
lstrlenA
lstrcatA
GetSystemDirectoryA
ReadFile
WriteFile
SetFileTime
GetModuleFileNameA
CloseHandle
GetLastError
CreateEventA
GetVersionExA
GetProcAddress
CreateFileA
SetFilePointer
GetVersion
GetStdHandle
GetFileType
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetCurrentProcessId
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetACP
GetStringTypeW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
GetCPInfo
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
user32
DispatchMessageA
TranslateMessage
GetMessageA
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyA
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE