Static task
static1
Behavioral task
behavioral1
Sample
750215524b86f9a27d06823947dc77cc.exe
Resource
win7-20231129-en
General
-
Target
750215524b86f9a27d06823947dc77cc
-
Size
378KB
-
MD5
750215524b86f9a27d06823947dc77cc
-
SHA1
c7be85716a622a9f77503513ad2c9d280f59eb73
-
SHA256
012c4b84a28126705bcd3f7e356f2148836afa61b7fadfdb5297f29af92ae66d
-
SHA512
4f282f20c83d154c7d70d1c54b1af40e4257940f27597613c6c31d0f0ae163051de54caff2c7333a945679928d78d825510d7b5506985041f1191b13f98abe58
-
SSDEEP
1536:DPW8EuqmpOgFduPt90yB7fj9UGwK53c7:DoRmpOWKt9b9UmM7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 750215524b86f9a27d06823947dc77cc
Files
-
750215524b86f9a27d06823947dc77cc.exe windows:4 windows x86 arch:x86
fefb044d82a61ce66af5f6fe5336caaf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WriteFile
CreateFileA
GetLastError
MultiByteToWideChar
lstrlenA
InterlockedDecrement
WinExec
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
WideCharToMultiByte
LocalFree
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RaiseException
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
HeapSize
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
VirtualAlloc
ole32
OleRun
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoUninitialize
oleaut32
SysFreeString
VariantClear
GetErrorInfo
SysAllocString
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ