Static task
static1
Behavioral task
behavioral1
Sample
7267fc9525a05cf71b1cf0f598c47def.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7267fc9525a05cf71b1cf0f598c47def.exe
Resource
win10v2004-20231215-en
General
-
Target
7267fc9525a05cf71b1cf0f598c47def
-
Size
588KB
-
MD5
7267fc9525a05cf71b1cf0f598c47def
-
SHA1
61764ade43c753e1cea0ed443acf27528dbcf0a2
-
SHA256
ee70830d6c1e57b47c20d701f0bfa12a6ee6abc5b38d48ae55a292f8437c2ff3
-
SHA512
3102571519c78ef39909437bbf688d0009e3bcaf6025b0819bb07143387f9a946674c3620bc95de56ac0c261a666679c6b3e3432a3d56d6f5b488aae7261959d
-
SSDEEP
12288:6lRvNj2xrc084wHTILMbZJ2XZsH834ZU3EbMnTdYR:6DQlc08hHULM1d8EUUQnTd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7267fc9525a05cf71b1cf0f598c47def
Files
-
7267fc9525a05cf71b1cf0f598c47def.exe windows:4 windows x86 arch:x86
e165dc25a2713a7f8f11cc1520ffca98
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_GetImageCount
CreatePropertySheetPageA
GetEffectiveClientRect
DrawStatusTextA
ImageList_GetImageRect
ImageList_Add
CreatePropertySheetPageW
ImageList_GetFlags
ImageList_SetImageCount
CreateToolbar
DrawStatusTextW
CreateStatusWindowA
ImageList_Remove
ImageList_SetDragCursorImage
ImageList_DragShowNolock
ImageList_DrawEx
InitCommonControlsEx
ImageList_GetIcon
_TrackMouseEvent
ImageList_DragLeave
ImageList_ReplaceIcon
MakeDragList
DrawStatusText
ImageList_LoadImageW
ImageList_SetFilter
user32
WindowFromDC
GetMessageTime
RegisterClassA
OemToCharBuffW
InvertRect
ValidateRgn
DefWindowProcW
DdeAbandonTransaction
RegisterClassExA
RegisterHotKey
MonitorFromWindow
GetAsyncKeyState
ShowWindow
VkKeyScanA
CreateWindowExW
MessageBoxW
LoadCursorA
DrawAnimatedRects
DestroyWindow
CreateDialogIndirectParamA
DdeCreateStringHandleW
CreateIcon
kernel32
GetCurrentThreadId
GetConsoleOutputCP
InterlockedIncrement
GetSystemTimeAsFileTime
SetStdHandle
IsDebuggerPresent
UnhandledExceptionFilter
HeapFree
TlsSetValue
GetTimeZoneInformation
EnterCriticalSection
VirtualQuery
InterlockedDecrement
TerminateProcess
HeapAlloc
Sleep
SetLastError
VirtualFree
GetUserDefaultLCID
CreateFileA
GetLocaleInfoW
GetStringTypeA
MultiByteToWideChar
WriteFile
WriteConsoleW
GetTickCount
GetOEMCP
GetCurrentProcess
TlsFree
GetStartupInfoW
CloseHandle
GetDateFormatA
OpenMutexA
CompareStringA
ExitProcess
GetConsoleMode
SetConsoleCtrlHandler
GetCPInfo
CreateMutexA
GetCurrentThread
GetTimeFormatA
GetCurrentProcessId
LoadLibraryA
FreeLibrary
CompareStringW
GetACP
GetModuleHandleA
GetModuleFileNameA
LeaveCriticalSection
SetFilePointer
WideCharToMultiByte
VirtualAlloc
HeapCreate
GetEnvironmentStringsW
GetProcAddress
DeleteCriticalSection
GetLocaleInfoA
LCMapStringW
GetCommandLineW
GetLastError
EnumSystemLocalesA
FreeEnvironmentStringsW
SetHandleCount
GetConsoleCP
ReadFile
FlushFileBuffers
GetStdHandle
LCMapStringA
RtlUnwind
GetThreadPriority
HeapDestroy
InitializeCriticalSectionAndSpinCount
GetStartupInfoA
SetEnvironmentVariableA
TlsAlloc
GetModuleFileNameW
GetModuleHandleW
InterlockedExchange
TlsGetValue
SetUnhandledExceptionFilter
GetStringTypeW
HeapSize
GetFileType
WriteConsoleA
QueryPerformanceCounter
IsValidLocale
GetCommandLineA
HeapReAlloc
IsValidCodePage
comdlg32
ChooseColorA
GetOpenFileNameA
GetSaveFileNameW
PrintDlgW
advapi32
RegDeleteKeyA
CryptDestroyKey
ReportEventW
CryptSignHashW
RegSetValueW
LogonUserW
ReportEventA
RegEnumKeyExW
CryptSignHashA
Sections
.text Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 248KB - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ