Static task
static1
Behavioral task
behavioral1
Sample
7705517006d123214135f6a29d0441e7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7705517006d123214135f6a29d0441e7.exe
Resource
win10v2004-20231215-en
General
-
Target
7705517006d123214135f6a29d0441e7
-
Size
480KB
-
MD5
7705517006d123214135f6a29d0441e7
-
SHA1
96ac610ef6d36d1adc4f22dde2577ee8aa774cce
-
SHA256
1e8d9e94b3029ea64b80d5ebdb371f8c65ed0f6acf13840389143ea6b95749fa
-
SHA512
bed8029e6e3f58eae04bb8d8ba090084c383716e1f2e66b549b4367b65102b465694c61511389fbd29837fee6b1a71a86ce2761687977d3a33ba5810c8869800
-
SSDEEP
12288:aKDN+EKOW4JAjDO6kKt2yMMnMMMMMRI6bqwu9jBib9MS7Sez7bCJB/T:bNXKr4JAjDO6gyMMnMMMMMRIyqwSs9MD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7705517006d123214135f6a29d0441e7
Files
-
7705517006d123214135f6a29d0441e7.exe windows:4 windows x86 arch:x86
b0321a144ea85bb048f21253016d8e24
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
VariantCopy
kernel32
GetStartupInfoA
netapi32
NetDfsMove
rpcrt4
IUnknown_AddRef_Proxy
NdrDllCanUnloadNow
NdrStubCall2
NdrOleFree
NdrStubForwardingFunction
NdrDllGetClassObject
NdrDllUnregisterProxy
IUnknown_QueryInterface_Proxy
NdrOleAllocate
NdrDllRegisterProxy
NdrCStdStubBuffer2_Release
RpcStringFreeW
ntdll
RtlAdjustPrivilege
NtAllocateVirtualMemory
RtlAddAccessAllowedAceEx
msvcrt
free
_adjust_fdiv
malloc
_initterm
Sections
.text Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 118KB - Virtual size: 968KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 258KB - Virtual size: 258KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ