Static task
static1
Behavioral task
behavioral1
Sample
7493a89c641f076e7910c15482457508.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7493a89c641f076e7910c15482457508.exe
Resource
win10v2004-20231215-en
General
-
Target
7493a89c641f076e7910c15482457508
-
Size
175KB
-
MD5
7493a89c641f076e7910c15482457508
-
SHA1
2ffcaadf90bf4734bc843e62cc51de2718753172
-
SHA256
e7fa369943b579f96d440a298d0de73b2a4e276b6a387426b02b8c63e7990030
-
SHA512
03d47b689d63ac1866f1ee3fe618dd95ae10a3ae014372c1e56b0bc0e24716ee3693a07afb571a5ba4b8d1bb29f714d526782337137711758152786ccdf046e8
-
SSDEEP
3072:d31AKMFPbRMIVzrEFUpyqhdXgU1qWGCsjxAwZ1y1TtfS6rIZL7p2aJh3/TGDv2z6:d3mKiVMYzwFydXrqH7jJbqUZL7px/T+P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7493a89c641f076e7910c15482457508
Files
-
7493a89c641f076e7910c15482457508.exe windows:4 windows x86 arch:x86
f0de25dfdfe65d26f71d62aa878578d7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
kernel32
GetLocalTime
GetStringTypeW
SetErrorMode
ConvertFiberToThread
GetSystemDirectoryW
LocalAlloc
FileTimeToSystemTime
SetEnvironmentVariableW
FindFirstFileW
LCMapStringW
SetThreadIdealProcessor
LocalFileTimeToFileTime
EnumResourceNamesW
GetCurrentProcess
GetShortPathNameW
GetOEMCP
FindClose
FindResourceW
RegisterWaitForSingleObject
LocalFree
CompareStringA
FindNextFileW
FileTimeToLocalFileTime
LoadResource
SetCurrentDirectoryW
SystemTimeToFileTime
FreeLibrary
IsBadReadPtr
SearchPathW
user32
ReleaseCapture
ValidateRect
ExcludeUpdateRgn
SetCapture
GetCapture
EnableWindow
RealGetWindowClassA
ValidateRgn
DestroyWindow
UpdateWindow
IsWindow
IsWindowEnabled
InvalidateRgn
FlashWindow
GetUpdateRgn
Sections
.text Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imul Size: 1024B - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ