Static task
static1
Behavioral task
behavioral1
Sample
7a57a6d9bac6be7f0462fd4b9c7e5e31.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7a57a6d9bac6be7f0462fd4b9c7e5e31.exe
Resource
win10v2004-20231215-en
General
-
Target
7a57a6d9bac6be7f0462fd4b9c7e5e31
-
Size
37KB
-
MD5
7a57a6d9bac6be7f0462fd4b9c7e5e31
-
SHA1
b4b7ec5fa19aed61342244c1b598ad09a8254076
-
SHA256
b162ee6b1a26633ef8eb61125f1de5556983fc17dc196655458815a16d4e805d
-
SHA512
09472ffbe78f3ea9d29540f1983fa02031b48829bbcc057d5ba9e8dc7a2e818740d7d9ccd2df44e1623a133952ea4322b70b9bb024f160ee14ee354112bfb675
-
SSDEEP
768:jpuxbbb93pfzxWt7QYQ8IgDidhHPjAJYvHF0lwY437avXKrnrj:j0Rbb5WRQYt9ir/2wraI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a57a6d9bac6be7f0462fd4b9c7e5e31
Files
-
7a57a6d9bac6be7f0462fd4b9c7e5e31.exe windows:4 windows x86 arch:x86
879072da78b6146d76f51c669b56a5f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
GetTickCount
GetProcAddress
LoadLibraryA
HeapFree
HeapAlloc
GetProcessHeap
VirtualProtect
user32
ShowWindowAsync
GetLastActivePopup
RegisterClassA
GetParent
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 392B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE