Static task
static1
Behavioral task
behavioral1
Sample
722e63f8910e9fe1d7775c3a0495de54.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
722e63f8910e9fe1d7775c3a0495de54.exe
Resource
win10v2004-20231222-en
General
-
Target
722e63f8910e9fe1d7775c3a0495de54
-
Size
320KB
-
MD5
722e63f8910e9fe1d7775c3a0495de54
-
SHA1
88041f0b4f76532cdf45b48591f7953e83981070
-
SHA256
fe893dcee37d4c6e62ec9afcf149062916a51af6141323ff74ae361a95105273
-
SHA512
7f9f74da10056e30b86fe50d192c4c3410b7bd9c6429331980834571d04b9609174c240dca9512d933e9d8f051c4b567aefb2714868785907bd927a50a7c7a1b
-
SSDEEP
6144:qCo86w8tceyv3WsJZAShsJduZKMjHaJUCo0nyglJ//MQ/81hpPbbcjdwEpqK:wLw8t/gGsIpduZJax/r3MQ/Msxw2qK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 722e63f8910e9fe1d7775c3a0495de54
Files
-
722e63f8910e9fe1d7775c3a0495de54.exe windows:4 windows x86 arch:x86
6f46f06a35baad1c6627aaf878ffdc06
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSize
lstrcmpiA
HeapDestroy
GetTickCount
GetPrivateProfileStringA
ExitProcess
GetDriveTypeA
GetStartupInfoA
SetEvent
DeleteTimerQueue
GetConsoleWindow
CreateHardLinkA
DeleteCriticalSection
GetLastError
VirtualProtect
CloseHandle
ReleaseMutex
GetModuleHandleA
GetTempPathA
ResumeThread
IsValidCodePage
advapi32
RegLoadKeyA
RegSaveKeyA
CredFree
LsaFreeMemory
RegQueryInfoKeyA
RegCloseKey
ReportEventA
FreeSid
LsaClose
OpenEventLogA
IsValidSid
RegEnumKeyExA
CloseEventLog
RegCreateKeyExA
IsValidAcl
RegQueryValueExA
GetFileSecurityA
AccessCheck
RegEnumValueA
LsaSetSecret
GetSecurityInfo
CloseTrace
wininet
DeleteUrlCacheEntryA
DetectAutoProxyUrl
FindCloseUrlCache
HttpQueryInfoA
HttpSendRequestA
user32
CreateWindowExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ