Static task
static1
Behavioral task
behavioral1
Sample
7352a7ce255c5bd1a20ff362a1130511.exe
Resource
win7-20231215-en
General
-
Target
7352a7ce255c5bd1a20ff362a1130511
-
Size
17KB
-
MD5
7352a7ce255c5bd1a20ff362a1130511
-
SHA1
873c94571b5ed1cde10a590bd6275fda09ec8cf2
-
SHA256
04a4d956827cb5c64fa44f113d2cdf553f78fef1c365fe7fcfcb803c6ac57e45
-
SHA512
d52cc0bd4912f800516e8fe162e0975bd4f165aef119642e7b92b554e65fde2e53c8495d831b39c663eeae757f61978d0589d75253aab3b7191705d88a83b007
-
SSDEEP
384:6Oq5Rl1nLtQiLnfHp86WL31iEE9FQh1p:6p5ptQQfHp86Wz1iEE9FQh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7352a7ce255c5bd1a20ff362a1130511
Files
-
7352a7ce255c5bd1a20ff362a1130511.exe windows:4 windows x86 arch:x86
406de7aa000a6030b668caed148bfc5d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendMessageA
FindWindowA
wsprintfA
kernel32
CloseHandle
CreateFileA
CreateThread
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
GetTempPathA
GetTickCount
HeapAlloc
LoadResource
LockResource
RtlZeroMemory
SizeofResource
Sleep
WriteFile
lstrcatA
lstrcpyA
lstrlenA
HeapFree
shell32
ShellExecuteA
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyA
shlwapi
StrStrA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 982B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ