Static task
static1
Behavioral task
behavioral1
Sample
7709305ac6bbdd6ca33dd6c70368eb48.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7709305ac6bbdd6ca33dd6c70368eb48.exe
Resource
win10v2004-20231215-en
General
-
Target
7709305ac6bbdd6ca33dd6c70368eb48
-
Size
152KB
-
MD5
7709305ac6bbdd6ca33dd6c70368eb48
-
SHA1
894edce53868328800ecc2a959b0ee26d6105c82
-
SHA256
57c8906052b4f65e73e7f216d217fb2ea7e9abf9ac52292fe4683032178cd952
-
SHA512
b40f57eb99f4d8b919f5ec8b3623cfe0c76dba386f41294fb466f56149decf2d964cf33de01ac843cbe04b61a6d47758c86c0bae641886f7f6f3702b0d188fd1
-
SSDEEP
1536:xBqwllIT75OKLjPn6A5muwXloYNPjtm6Oh8P:SwllIBOAjPnT5mFy0jsL8P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7709305ac6bbdd6ca33dd6c70368eb48
Files
-
7709305ac6bbdd6ca33dd6c70368eb48.exe windows:1 windows x86 arch:x86
ce43e05a34fa828797ff138643c6628d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
InitializeCriticalSection
DeleteCriticalSection
lstrcpyW
InterlockedDecrement
EnterCriticalSection
lstrlenW
VirtualFree
SetUnhandledExceptionFilter
InterlockedDecrement
WriteFile
LocalAlloc
ExitProcess
HeapReAlloc
LeaveCriticalSection
lstrcpyW
SetFilePointer
GetCommandLineA
lstrcpyW
EnterCriticalSection
GetLastError
GetTickCount
ReadFile
LoadLibraryW
TerminateProcess
GetModuleFileNameA
HeapAlloc
lstrcpyW
GetStartupInfoW
CloseHandle
user32
SetWindowLongW
DispatchMessageA
SetCapture
SetFocus
SetCapture
GetWindowLongW
EndDialog
LoadStringA
GetKeyState
GetWindowLongW
ReleaseCapture
LoadStringW
UpdateWindow
ScreenToClient
LoadCursorW
MessageBeep
IsWindow
SetCursor
DialogBoxParamW
SendMessageA
LoadIconW
GetMenu
advapi32
RegSetValueExW
RegOpenKeyW
RegOpenKeyW
RegCreateKeyExW
RegDeleteValueW
FreeSid
RegDeleteKeyW
AddAccessAllowedAce
RegQueryValueExW
OpenProcessToken
GetTokenInformation
OpenProcessToken
AllocateAndInitializeSid
RegSetValueExA
gdi32
GetObjectW
GetDeviceCaps
CreateCompatibleDC
CreateBitmap
GetStockObject
CreateBitmap
DeleteDC
CreateCompatibleBitmap
SetTextColor
SelectObject
DeleteObject
CreateCompatibleDC
SetBkMode
GetDeviceCaps
CreateCompatibleBitmap
GetObjectW
LineTo
Sections
Size: 141KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE