Static task
static1
Behavioral task
behavioral1
Sample
a7fc1d5347b09e5eca3efd722da0fda9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a7fc1d5347b09e5eca3efd722da0fda9.exe
Resource
win10v2004-20231215-en
General
-
Target
a7fc1d5347b09e5eca3efd722da0fda9.exe
-
Size
176KB
-
MD5
a7fc1d5347b09e5eca3efd722da0fda9
-
SHA1
d579080d853ffdc7d536196b573130cc041049cb
-
SHA256
9ac3407fd311b8d07915b59145a9ba6085de461fc574b318fadabd609dce78ad
-
SHA512
9b815e526b8afe41550fb1759f4ac14ba28400e3a0f38d22123742545d9c74b9f35c60c55747ff2771a480e78b43d76e46c2a6cc97227bdd3176ad2a73effe01
-
SSDEEP
3072:uzePzkihUoV6JxMyKo3tmgIWYnNDuYuCQGGQzzAHhnhUleippVgEK6:uRx2yKotmGYvQGGIzAHhCNgl6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7fc1d5347b09e5eca3efd722da0fda9.exe
Files
-
a7fc1d5347b09e5eca3efd722da0fda9.exe.exe windows:4 windows x86 arch:x86
552f822765756bb81896bf1469f39146
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupCopyOEMInfW
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
mfc42u
ord4229
ord537
ord4847
ord4992
ord2613
ord5261
ord4370
ord5276
ord6048
ord3592
ord2567
ord4390
ord3569
ord6051
ord1767
ord4419
ord4401
ord5237
ord2377
ord4073
ord6370
ord4347
ord5286
ord3793
ord4831
ord4435
ord2640
ord2047
ord6372
ord3744
ord5059
ord1720
ord1768
ord5157
ord2116
ord5273
ord3397
ord4621
ord3716
ord942
ord861
ord2506
ord6433
ord540
ord567
ord324
ord2293
ord2294
ord6130
ord4126
ord4125
ord6211
ord4294
ord4282
ord535
ord6330
ord6124
ord3747
ord6193
ord925
ord4704
ord2371
ord755
ord470
ord2078
ord823
ord4279
ord5298
ord4270
ord3703
ord6066
ord6132
ord5296
ord3341
ord2388
ord5193
ord1089
ord3917
ord5727
ord2504
ord2546
ord4480
ord6371
ord4269
ord4667
ord800
ord609
ord781
ord795
ord641
ord2717
ord815
ord825
ord561
ord3733
ord4418
ord4616
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord5710
ord5285
ord5303
ord4692
ord4074
ord1143
ord1165
ord5257
ord2438
ord5977
ord1569
msvcrt
_snprintf
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
_XcptFilter
_exit
malloc
free
_iob
_wfopen
fputc
fwprintf
vfwprintf
fputwc
fprintf
vfprintf
_snwprintf
_controlfp
__argc
wcslen
exit
__wargv
_wcsicmp
swprintf
_ultow
wcscmp
swscanf
_beginthreadex
fflush
kernel32
GetVersionExW
SetLastError
GetLastError
CreateFileW
CloseHandle
WideCharToMultiByte
WriteFile
GetWindowsDirectoryW
GetSystemDirectoryW
DeleteFileW
GlobalFree
GlobalAlloc
GetTempFileNameW
GetTempPathW
GetCurrentThreadId
GetLocalTime
FormatMessageW
FormatMessageA
CreateEventW
SetEvent
WaitForSingleObject
GetTickCount
CreateMutexW
InterlockedCompareExchange
ReleaseMutex
GetModuleHandleW
GetStartupInfoW
Sleep
user32
GetWindowRect
PostMessageW
TrackMouseEvent
EnableWindow
InvalidateRect
SetCursor
IsIconic
GetSystemMetrics
DrawIcon
SetTimer
GetSysColor
LoadCursorW
LoadIconW
SendMessageW
GetClientRect
advapi32
QueryServiceStatus
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
CloseServiceHandle
ControlService
StartServiceW
DeleteService
OpenServiceW
OpenSCManagerW
RegCloseKey
RegQueryValueW
RegEnumKeyExW
RegDeleteKeyW
RegSetValueW
RegCreateKeyExW
RegOpenKeyExW
ole32
CoInitializeEx
CoCreateInstance
CoUninitialize
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qwcrouh Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE