Static task
static1
Behavioral task
behavioral1
Sample
7zFM.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7zFM.exe
Resource
win10v2004-20231222-en
General
-
Target
7zFM.exe
-
Size
574KB
-
MD5
bbb2667d9b2fd922e52883a63e8cd948
-
SHA1
d4238ac5e2eb3ec7236e5e098ee3b31d26efebee
-
SHA256
69392e292a0e7195e0c96bbbfe989949d044b63dbce2e5324f1bb99aa2560e3f
-
SHA512
2f801ae372ca3fc4cd858b6d1783977c8357e5616f45311ffff70b3eee20490f2c6e34a12139a6c0b9faaaf6e59985fabc1cae22510e6b632bae425a58793681
-
SSDEEP
12288:eV8G6GhwNq+RdkYjdI8no/yM9MXxtL+J79a/UcBs93ttNfAq4PhtbZbD89PoS:eV8G6GhwA+RdkYjNo/3g1+JI/UPpttNd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7zFM.exe
Files
-
7zFM.exe.exe windows:4 windows x86 arch:x86
7f70f1b107c56dddec9195a9221211fc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_ReplaceIcon
InitCommonControlsEx
CreateToolbarEx
CreateStatusWindowW
ord17
ImageList_GetImageCount
ImageList_AddMasked
ImageList_Create
ImageList_Destroy
PropertySheetW
comdlg32
CommDlgExtendedError
GetOpenFileNameW
gdi32
DeleteObject
oleaut32
VariantCopy
VariantClear
SysAllocString
SysAllocStringLen
SysFreeString
SysStringByteLen
SysStringLen
ole32
CoTaskMemAlloc
OleUninitialize
OleInitialize
CoUninitialize
RevokeDragDrop
DoDragDrop
CoCreateInstance
CoInitialize
ReleaseStgMedium
RegisterDragDrop
CoTaskMemFree
user32
ChildWindowFromPointEx
WindowFromPoint
RegisterClipboardFormatW
UpdateWindow
SetTimer
MapVirtualKeyW
EnableMenuItem
RemoveMenu
CheckMenuRadioItem
CheckMenuItem
AppendMenuW
GetMenu
LoadMenuW
SetMenu
DrawMenuBar
IsWindowEnabled
IsDlgButtonChecked
CheckDlgButton
CheckRadioButton
IsZoomed
GetClientRect
ReleaseCapture
SetCapture
GetCapture
LoadIconW
GetWindowPlacement
SetWindowPlacement
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
PostQuitMessage
SetDlgItemTextW
GetFocus
GetKeyState
InvalidateRect
PostMessageW
SetWindowTextW
EndDialog
EnableWindow
DestroyWindow
SetFocus
CreatePopupMenu
DestroyMenu
LoadBitmapW
MessageBoxW
DefWindowProcW
GetClassInfoW
LoadCursorW
RegisterClassW
CallWindowProcW
CreateWindowExW
DialogBoxParamW
SetWindowLongW
GetWindowLongW
GetParent
ShowWindow
MoveWindow
ScreenToClient
GetDlgItem
GetWindowRect
MapDialogRect
MonitorFromWindow
GetMonitorInfoA
SystemParametersInfoW
GetDialogBaseUnits
GetWindowTextLengthW
GetWindowTextW
SendMessageW
LoadStringW
InsertMenuItemW
SetMenuItemInfoW
GetMenuItemInfoW
SetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
CharUpperW
GetCursorPos
TrackPopupMenuEx
GetMenuItemCount
ClientToScreen
SetCursor
KillTimer
DestroyIcon
GetSubMenu
advapi32
RegQueryValueExA
RegOpenKeyExA
LsaAddAccountRights
LsaClose
GetUserNameW
LsaOpenPolicy
LookupAccountNameW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegCreateKeyExW
GetFileSecurityW
SetFileSecurityW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyW
RegCloseKey
RegOpenKeyExW
shell32
SHChangeNotify
ExtractIconExW
ShellExecuteW
SHGetSpecialFolderLocation
SHGetDesktopFolder
ShellExecuteExW
SHGetFileInfoW
SHBrowseForFolderW
SHGetPathFromIDListW
DragQueryFileW
DragFinish
SHGetMalloc
SHFileOperationW
msvcrt
wcslen
exit
_XcptFilter
_exit
_onexit
__dllonexit
_controlfp
__set_app_type
__p__fmode
?terminate@@YAXXZ
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
memcpy
__CxxFrameHandler
_CxxThrowException
memmove
strcmp
wcsstr
wcscmp
malloc
free
srand
rand
memset
??1type_info@@UAE@XZ
strlen
_purecall
memcmp
wcscat
_beginthreadex
_except_handler3
_acmdln
kernel32
Process32NextW
OpenProcess
GlobalSize
GetSystemDefaultLangID
GetUserDefaultLangID
CopyFileW
FindNextChangeNotification
GetCompressedFileSizeW
GetCommandLineW
GetVersionExW
OutputDebugStringW
InterlockedDecrement
InterlockedIncrement
AreFileApisANSI
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateEventW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
WaitForSingleObject
WaitForMultipleObjects
GetStdHandle
GetSystemTimeAsFileTime
FileTimeToDosDateTime
GlobalMemoryStatus
lstrlenW
FileTimeToLocalFileTime
FileTimeToSystemTime
CompareFileTime
CreateProcessW
GetCurrentProcess
GlobalFree
GlobalAlloc
Sleep
WriteFile
ReadFile
DeviceIoControl
SetFilePointer
GetFileSize
GetLogicalDriveStringsW
FindFirstChangeNotificationW
FindCloseChangeNotification
GetFileInformationByHandle
GetFileAttributesW
GetModuleHandleA
FindNextFileW
Process32FirstW
FindClose
GetCurrentThreadId
GetCurrentProcessId
GetTempPathW
GetCurrentDirectoryW
SetLastError
DeleteFileW
CreateDirectoryW
MoveFileW
RemoveDirectoryW
SetFileAttributesW
CreateFileW
SetFileTime
CloseHandle
GetWindowsDirectoryW
FormatMessageW
LocalFree
GetModuleFileNameW
LoadLibraryW
LoadLibraryExW
FreeLibrary
GlobalLock
GlobalUnlock
HeapAlloc
GetProcessHeap
HeapFree
GetModuleHandleW
GetProcAddress
GetDiskFreeSpaceW
GetDriveTypeW
GetVolumeInformationW
WideCharToMultiByte
MultiByteToWideChar
GetLastError
GetTickCount
SetPriorityClass
ExpandEnvironmentStringsW
VirtualAlloc
VirtualFree
SetEvent
InitializeCriticalSection
LoadLibraryA
LocalAlloc
FindFirstFileW
CreateToolhelp32Snapshot
InterlockedExchange
RaiseException
GetStartupInfoA
SetEndOfFile
Sections
.text Size: 409KB - Virtual size: 409KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ