Static task
static1
Behavioral task
behavioral1
Sample
7398723150241abc45ea382f0f322c12.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7398723150241abc45ea382f0f322c12.exe
Resource
win10v2004-20231215-en
General
-
Target
7398723150241abc45ea382f0f322c12
-
Size
368KB
-
MD5
7398723150241abc45ea382f0f322c12
-
SHA1
6049a9ca3d121876bb8adb1cd00359e4fa651330
-
SHA256
5c168582a62ea737bb346eea2e4ba325f40cf088a4261317965ecdfc85ecf6d0
-
SHA512
99b193156883bb11215ddb33356b7a95699883e3c05d1ec72e3faf61d742bf32d9337d940a5595eec0fe3664c9deb424a7162796b29cc32147c4e1b9326c444b
-
SSDEEP
6144:3ImK6bfle7EyKetqF/IRfFi/OQzZOsj3oQ8Ua8DDpxt1N:3IR6bfleVVAF/IRfs/9zc6YvUFDDpx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7398723150241abc45ea382f0f322c12
Files
-
7398723150241abc45ea382f0f322c12.exe windows:4 windows x86 arch:x86
240bb9ea2ec78fd60a08935203d25bc5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetPriorityClass
GetLocalTime
DeleteCriticalSection
OpenWaitableTimerA
SetEnvironmentVariableA
CloseHandle
lstrcatW
LoadLibraryExA
CompareStringW
GetCurrentProcessId
CompareStringA
GetCalendarInfoA
LCMapStringW
EnterCriticalSection
SetFileAttributesW
HeapFree
FreeEnvironmentStringsW
TerminateProcess
TransactNamedPipe
GetLastError
TlsGetValue
ExitProcess
GetCurrentThread
FreeEnvironmentStringsA
GetFileAttributesExA
VirtualAlloc
GetCurrencyFormatW
InterlockedIncrement
GetCurrentThreadId
SetHandleCount
FlushConsoleInputBuffer
SetStdHandle
FlushFileBuffers
GetCommandLineW
GetVolumeInformationW
GetCompressedFileSizeA
GetCPInfo
GetEnvironmentStringsW
GetStartupInfoW
GetFileSize
LCMapStringA
GetTickCount
GetEnvironmentStrings
FindResourceExW
EnumDateFormatsExA
GetProcAddress
InterlockedDecrement
VirtualQuery
LoadLibraryA
FindNextFileA
TlsSetValue
WriteFile
OpenSemaphoreA
LocalReAlloc
OpenMutexA
InterlockedExchange
CreateMutexA
SetLastError
InitializeCriticalSection
RaiseException
PulseEvent
GlobalUnfix
CompareFileTime
HeapAlloc
lstrcpyn
HeapReAlloc
CreateProcessW
QueryPerformanceCounter
VirtualFree
GetDriveTypeA
GetCommandLineA
OpenFile
SetTimeZoneInformation
GetSystemInfo
GetModuleFileNameA
MultiByteToWideChar
GetStdHandle
GetStringTypeW
EnumSystemCodePagesW
TlsFree
UnhandledExceptionFilter
GetVersion
CreateProcessA
WideCharToMultiByte
MoveFileExW
SetConsoleCursorPosition
GetModuleHandleA
GetCurrentProcess
EnumCalendarInfoA
GetSystemTimeAsFileTime
WritePrivateProfileSectionA
WritePrivateProfileStructW
WaitForSingleObjectEx
GetStringTypeA
ReadFile
GetModuleFileNameW
CommConfigDialogA
HeapCreate
GetNamedPipeHandleStateA
RtlUnwind
RtlFillMemory
SetEvent
LeaveCriticalSection
SetFilePointer
VirtualFreeEx
SetConsoleMode
GetStartupInfoA
GetShortPathNameW
FreeLibrary
EnumResourceLanguagesW
GetFileType
FindFirstFileExW
TlsAlloc
GetSystemTime
IsBadWritePtr
GetTimeZoneInformation
SetConsoleTitleA
HeapDestroy
comctl32
ImageList_GetIconSize
ImageList_Replace
ImageList_Write
CreateStatusWindowW
ImageList_LoadImageW
InitCommonControlsEx
ImageList_Merge
ImageList_SetFilter
ImageList_DragLeave
ImageList_Add
ImageList_AddMasked
MakeDragList
ImageList_GetIcon
InitMUILanguage
ImageList_SetImageCount
DrawStatusTextA
ImageList_AddIcon
ImageList_Copy
ImageList_LoadImage
CreateToolbar
user32
CreateMenu
SetDeskWallpaper
AnimateWindow
CharLowerBuffA
UnionRect
GetClipCursor
CallMsgFilterA
FrameRect
RegisterClassExA
SetClipboardViewer
UnpackDDElParam
ChildWindowFromPointEx
VkKeyScanExW
GetWindowTextLengthA
DestroyWindow
ToAscii
CharNextA
LoadCursorA
FindWindowA
MessageBoxW
GetWindowModuleFileNameW
DdeImpersonateClient
wvsprintfW
GetCaretPos
SystemParametersInfoA
PostQuitMessage
DefDlgProcW
DdeQueryNextServer
EnumDisplaySettingsW
VkKeyScanW
IsWindowUnicode
RegisterWindowMessageW
EnumThreadWindows
EnumPropsA
GetScrollRange
UnhookWindowsHook
AnyPopup
IsCharUpperA
ReleaseDC
MapVirtualKeyExW
CreateIconIndirect
RegisterClassA
Sections
.text Size: 124KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ