Static task
static1
Behavioral task
behavioral1
Sample
7a68ce452c43844de713aed5c63eb0b6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7a68ce452c43844de713aed5c63eb0b6.exe
Resource
win10v2004-20231215-en
General
-
Target
7a68ce452c43844de713aed5c63eb0b6
-
Size
148KB
-
MD5
7a68ce452c43844de713aed5c63eb0b6
-
SHA1
59435513fa84123c5805dc7e28be33c61e83c3be
-
SHA256
73ee7127702cedd24c7cad11b48ffb7c299f26ed520c8a8c4c9a79574435df09
-
SHA512
b6460385e7648974bbab8bc3d175e35458c40cbffc33cad66e5b5ea607ed3fbbbeea01c357ec1616459dc9b63dec513432adab1f988bb23e59ba33427bceb376
-
SSDEEP
3072:SJfWhhTwlNzlYsCeMtSYCzZViIvAtBKlmtFzyfK11ti5s/27:6uhhTwXysMoYCniftBK8tFW4IB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a68ce452c43844de713aed5c63eb0b6
Files
-
7a68ce452c43844de713aed5c63eb0b6.exe windows:4 windows x86 arch:x86
43d307e461779fcd43b4bf07bd94ed0f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoTaskMemFree
CoUninitialize
ReleaseStgMedium
CreateBindCtx
MkParseDisplayName
CoDisconnectObject
WriteClassStm
CoGetContextToken
StgCreateDocfileOnILockBytes
shell32
SHGetFolderPathA
oleaut32
GetErrorInfo
SysFreeString
SafeArrayUnaccessData
SafeArrayPtrOfIndex
VariantCopyInd
kernel32
IsBadHugeReadPtr
ExitProcess
lstrlenW
GlobalAlloc
GetCommandLineA
GetOEMCP
LoadLibraryA
GetProcAddress
ExitThread
IsBadReadPtr
GetModuleHandleA
VirtualAllocEx
VirtualAlloc
LoadLibraryExA
user32
GetTopWindow
GetLastActivePopup
GetWindowLongW
GetMenuState
GetKeyboardLayoutNameA
GetKeyNameTextA
GetSysColorBrush
GetWindowLongA
GetKeyboardType
GetMenuItemInfoA
GetSystemMenu
GetKeyboardLayoutList
GetMenuItemCount
GetIconInfo
GetKeyboardState
GetPropA
GetWindowDC
GetScrollPos
GetKeyboardLayout
GetScrollRange
GetMenuItemID
GetWindow
GetSysColor
GetKeyState
GetMessagePos
GetSubMenu
GetParent
GetScrollInfo
GetMenuStringA
GetMenu
Sections
CODE Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 593B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ddata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ