Static task
static1
Behavioral task
behavioral1
Sample
7e43b3f262d711c69f1aebe109ee9599ff18d10d76fda0e5a14780806c1aebd3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7e43b3f262d711c69f1aebe109ee9599ff18d10d76fda0e5a14780806c1aebd3.exe
Resource
win10v2004-20231215-en
General
-
Target
7e43b3f262d711c69f1aebe109ee9599ff18d10d76fda0e5a14780806c1aebd3
-
Size
2.0MB
-
MD5
51ed29fe6440fab9ffd0919d675dc900
-
SHA1
e39bd4265c319486434531c723bf4806be118b74
-
SHA256
7e43b3f262d711c69f1aebe109ee9599ff18d10d76fda0e5a14780806c1aebd3
-
SHA512
2e794b8d18c1f5543f89553e5a23d279d1b7a744f5be007dcb83a332495fa6812bad83c50efa169fbfe56b6b5ee011eed9d1de62c8b05d3aec8bbb00f14d9217
-
SSDEEP
24576:UHAJ3DIC1PHHNP96a99JjRRNxEE5TVvICwFHCoQTu+wMcf3F5Aq:UgJ3DFPt96AnRRNxF9ZF2f3U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e43b3f262d711c69f1aebe109ee9599ff18d10d76fda0e5a14780806c1aebd3
Files
-
7e43b3f262d711c69f1aebe109ee9599ff18d10d76fda0e5a14780806c1aebd3.exe windows:4 windows x64 arch:x64
1cd364a9e949d5ecebd6c614e64bc545
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
WriteFile
WriteConsoleW
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
SwitchToThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
LoadLibraryA
LoadLibraryW
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatus
GetProcessAffinityMask
GetProcAddress
GetEnvironmentStringsW
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
Sections
.text Size: 600KB - Virtual size: 599KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 804KB - Virtual size: 803KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 276B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 89KB - Virtual size: 89KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/32 Size: 24KB - Virtual size: 24KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/46 Size: 10KB - Virtual size: 9KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/63 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/80 Size: 512B - Virtual size: 70B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/99 Size: 181KB - Virtual size: 181KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/112 Size: 83KB - Virtual size: 83KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/124 Size: 30KB - Virtual size: 30KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 948B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.symtab Size: 150KB - Virtual size: 150KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ