Static task
static1
Behavioral task
behavioral1
Sample
7114b3e718db1b0d720e0c7e30e3f27d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7114b3e718db1b0d720e0c7e30e3f27d.exe
Resource
win10v2004-20231215-en
General
-
Target
7114b3e718db1b0d720e0c7e30e3f27d
-
Size
24KB
-
MD5
7114b3e718db1b0d720e0c7e30e3f27d
-
SHA1
5cb4aae3ba1c442f6ff5f89015cca178e42ddc89
-
SHA256
75f5ef1b1078c5495e0c516f34321c545412c22c9b57ae6c1447d5df82c17cfd
-
SHA512
a9e0f5da37395a23b1a01d63d626c05bc5f8df32eae12c87358645de021dd10e8cfcdd2618402aaf444b9765bf5c6e9bc14bbb79155ea1dde221fc55a976c136
-
SSDEEP
768:vP6IlpN4q/z5JhMleMtnfIMBLGYTduK/cErUf0:vP6IlNz5JuleMxAMBLGYT4xf0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7114b3e718db1b0d720e0c7e30e3f27d
Files
-
7114b3e718db1b0d720e0c7e30e3f27d.exe windows:4 windows x86 arch:x86
a7ca3142d7b6ade35e4bc9a1b164cd33
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileExA
GetLongPathNameW
MapViewOfFile
HeapWalk
HeapCreate
FindFirstVolumeW
BackupRead
AddAtomW
SetDefaultCommConfigA
OpenProfileUserMapping
IsBadHugeReadPtr
IsWow64Process
GetConsoleProcessList
user32
LoadBitmapW
SetScrollInfo
GetMenuState
IsCharAlphaNumericW
DrawIconEx
GetMenuStringA
GetMouseMovePointsEx
DrawTextA
ResolveDesktopForWOW
IsWinEventHookInstalled
Sections
.text Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ