Static task
static1
Behavioral task
behavioral1
Sample
7512ae770ea539f98e426854486532a8.exe
Resource
win7-20231215-en
General
-
Target
7512ae770ea539f98e426854486532a8
-
Size
1.5MB
-
MD5
7512ae770ea539f98e426854486532a8
-
SHA1
c24d9a0fd215afd39cf9d0144fbfb66fd6250221
-
SHA256
c1ca53d52708b72e8fcb718c86911b8b06cc3095a3232d1afc669dd535499ccc
-
SHA512
ec939d4bc9841edbb354335677a3738d2de93da1de3e111668bd3d88f0e8c02b469b08c156ef921ca9cdfd6ae35c93b978718daf037bdf94400b7263884df297
-
SSDEEP
6144:gb7URFZe1b2qxJs/YgZSxo1o0Yjes31BMC4XPdQQrRPr:gKFZgb2qVgOQMeCCPdPrRPr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 7512ae770ea539f98e426854486532a8
Files
-
7512ae770ea539f98e426854486532a8.exe windows:5 windows x86 arch:x86
7d0637a78d0f93efa6dd519de3fdab19
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msacm32
acmMetrics
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
__setusermatherr
memset
kernel32
GetTickCount
ExitProcess
EnterCriticalSection
CopyFileW
CreateDirectoryA
CreateDirectoryW
CreateFileA
CreateFileW
IsValidCodePage
GetStartupInfoA
GetModuleHandleA
GetLastError
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
QueryPerformanceCounter
SetErrorMode
GetCommandLineA
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
user32
EmptyClipboard
DestroyCursor
DispatchMessageW
DrawTextExW
DrawStateW
DrawIconEx
GetKeyState
gdi32
FrameRgn
SetTextJustification
SetTextColor
SetBkMode
SetBkColor
SelectObject
RectVisible
PtVisible
MoveToEx
LineTo
GetTextMetricsW
GetTextExtentPoint32W
GetStockObject
GetObjectW
GetDeviceCaps
GetCurrentObject
DeleteObject
FillRgn
ExtTextOutW
Escape
DeleteDC
CreateSolidBrush
CreateFontW
CreatePen
CreatePolygonRgn
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
winspool.drv
OpenPrinterW
EnumPrintersW
advapi32
RegQueryMultipleValuesA
RegLoadKeyW
RegGetKeySecurity
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueW
GetTokenInformation
FreeSid
EqualSid
RegOpenKeyExA
RegOpenKeyExW
RegOpenKeyW
RegQueryInfoKeyW
RegOpenKeyA
RegQueryValueExA
RegQueryValueExW
RegQueryValueW
RegSetKeySecurity
RegSetValueExW
RegUnLoadKeyW
ole32
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
Sections
.text Size: 424KB - Virtual size: 422KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ifx Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ