Static task
static1
Behavioral task
behavioral1
Sample
7b9c916609ccd7c1e64b0b8229786427.exe
Resource
win7-20231215-en
General
-
Target
7b9c916609ccd7c1e64b0b8229786427
-
Size
58KB
-
MD5
7b9c916609ccd7c1e64b0b8229786427
-
SHA1
b6d0445ebf0dd66087918e10d1557e27b5badde1
-
SHA256
b1f36c1d7b0e6249c376fedc9e1e40fba38d9ecf929a413fa0eb9cd9b8a3187e
-
SHA512
782c93087f8de089ed43f93561faa0f3377ba736b1e92f4b865ab41031918cf177d053553731e96bd55b4f3cadd6583c1976a69d8243438c58255e1212b3f7b3
-
SSDEEP
768:KjAUod16uAQHt7peIzdba1fWacapaMaUagavyFGWGl2l11L//MrSGEOgh9FcNQCD:SmdkfQHtVHaTFGiR//MrSG69FcveC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7b9c916609ccd7c1e64b0b8229786427
Files
-
7b9c916609ccd7c1e64b0b8229786427.exe windows:5 windows x86 arch:x86
47287b0e853285aa0bfcd0a5c0b76bff
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
recv
closesocket
htonl
WSASocketA
setsockopt
sendto
inet_addr
htons
connect
gethostbyname
WSAGetLastError
socket
send
WSAAsyncSelect
WSAStartup
WSACleanup
gethostname
mfc90
ord601
ord1559
ord690
ord265
ord798
ord800
ord5720
ord6098
ord5538
ord910
ord3066
ord2539
ord316
ord441
ord2481
ord2568
ord310
ord4392
ord2082
ord589
ord793
msvcr90
_controlfp_s
_invoke_watson
_crt_debugger_hook
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
_ismbblead
_strlwr
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_decode_pointer
_lock
_encode_pointer
__dllonexit
_unlock
_except_handler4_common
strncmp
strtok
exit
__CxxFrameHandler3
strcspn
strncpy
atoi
srand
_stricmp
memmove
rand
_time64
printf
memcpy
fputs
sprintf
fopen
fseek
fread
fclose
fwrite
memset
strstr
strchr
_itoa
_onexit
kernel32
CreateThread
OutputDebugStringA
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
GetVersion
FreeLibrary
GetComputerNameA
GlobalMemoryStatus
TerminateThread
GetLogicalDrives
GetVolumeInformationA
GetProcessHeap
HeapAlloc
ExitProcess
MoveFileA
GetLogicalDriveStringsA
ExitThread
GetCurrentProcessId
GetVersionExA
GetLocalTime
GetSystemTime
DeviceIoControl
GetTempPathA
CreateProcessA
ResumeThread
GetFileSize
FindResourceA
LoadResource
LockResource
SizeofResource
WriteFile
GetCurrentProcess
GetDriveTypeA
GetFileAttributesA
GetFileTime
CreateFileA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
SetFileTime
GetModuleHandleA
GetTickCount
CreateMutexA
GetLastError
lstrcmpiA
ExpandEnvironmentStringsA
SetSystemTime
FindFirstFileA
FindNextFileA
FindClose
GetWindowsDirectoryA
LoadLibraryA
GetProcAddress
lstrcpyA
CreateDirectoryA
RemoveDirectoryA
lstrcatA
SetFileAttributesA
lstrcmpA
GetModuleFileNameA
GetSystemDirectoryA
GetCurrentDirectoryA
CopyFileA
WinExec
DeleteFileA
Sleep
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
TerminateProcess
OpenProcess
user32
DispatchMessageA
LoadCursorA
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DefWindowProcA
PostQuitMessage
IsWindow
SendMessageA
EnumChildWindows
GetForegroundWindow
GetWindowLongA
GetClassNameA
LoadIconA
GetWindowTextA
GetParent
WindowFromPoint
GetCursorPos
PostMessageA
advapi32
QueryServiceStatus
LookupPrivilegeValueA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
DeleteService
SetServiceStatus
AdjustTokenPrivileges
StartServiceA
RegCreateKeyA
RegSetValueExA
RegCloseKey
CreateServiceA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
OpenProcessToken
shell32
ShellExecuteA
shlwapi
PathAppendA
SHDeleteKeyA
urlmon
URLDownloadToFileA
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 250KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ