Static task
static1
Behavioral task
behavioral1
Sample
7757cf830bed3d16555e2fda787d807e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7757cf830bed3d16555e2fda787d807e.exe
Resource
win10v2004-20231222-en
General
-
Target
7757cf830bed3d16555e2fda787d807e
-
Size
132KB
-
MD5
7757cf830bed3d16555e2fda787d807e
-
SHA1
6116f48c9ad592f3cbf9865d0768fce5be09ed7c
-
SHA256
3ad494283e0e298e90e2aa41fa76b3daff6e4bd5a1c0263c416a28077e723975
-
SHA512
71f6048bed909ce467c231f0c56d581e87527b8851282383fb55e3bfbf1d21ca112cfa236a17f53f8185b77fe0252307ff4fa9432d8fd3bcf5093bb2b3092187
-
SSDEEP
1536:DndX5qGj/irFK1fexd+BpES6slzJfiSvhazlvMPXLu2Ey0yssn:TdX5q6H1f6dUpE5slzJ6sazlG04n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7757cf830bed3d16555e2fda787d807e
Files
-
7757cf830bed3d16555e2fda787d807e.exe windows:4 windows x86 arch:x86
75765090238469fec834cb90f667159d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeviceIoControl
VirtualProtect
OutputDebugStringA
GetModuleHandleA
UnhandledExceptionFilter
GetSystemInfo
CreateProcessW
GetStartupInfoA
GetTimeZoneInformation
msvcrt
__setusermatherr
__p__fmode
exit
__mb_cur_max
getenv
memmove
log
strcat
__set_app_type
sin
_except_handler3
__getmainargs
_adjust_fdiv
__p__commode
_XcptFilter
_initterm
_acmdln
__p__environ
tolower
__lc_codepage
user32
GetCursorPos
GetSysColor
RemoveMenu
GetDesktopWindow
DispatchMessageA
ShowOwnedPopups
IsWindowVisible
GetForegroundWindow
EndPaint
SetWindowPos
ole32
OleDraw
OleSetMenuDescriptor
OleRun
OleSetClipboard
OleUninitialize
StgOpenStorage
CoGetClassObject
CreateILockBytesOnHGlobal
gdi32
GetObjectType
CreatePalette
GetViewportExtEx
GetEnhMetaFileHeader
SetWinMetaFileBits
PlayMetaFile
Polyline
SetROP2
MoveToEx
GetRegionData
shell32
SHGetFolderPathW
SHGetMalloc
DragFinish
SHCreateDirectoryExW
SHGetPathFromIDListA
ShellExecuteEx
DragQueryFile
ExtractIconA
SHBrowseForFolderA
Shell_NotifyIconW
advapi32
RegDeleteKeyW
RegEnumKeyW
IsValidSid
RegDeleteKeyA
RegEnumKeyExA
CopySid
RegCreateKeyA
CloseServiceHandle
version
GetFileVersionInfoW
VerInstallFileA
VerInstallFileW
VerFindFileW
comctl32
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_AddMasked
CreateToolbarEx
ImageList_LoadImageA
ImageList_GetIcon
ImageList_GetBkColor
ImageList_DragEnter
oleaut32
SafeArrayRedim
SetErrorInfo
SafeArrayCreate
SysStringByteLen
SysFreeString
SafeArrayUnaccessData
VariantInit
Sections
.text Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ