Static task
static1
Behavioral task
behavioral1
Sample
7a654d179cd6aa248bef8905b6c3d838.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7a654d179cd6aa248bef8905b6c3d838.exe
Resource
win10v2004-20231222-en
General
-
Target
7a654d179cd6aa248bef8905b6c3d838
-
Size
210KB
-
MD5
7a654d179cd6aa248bef8905b6c3d838
-
SHA1
5b0f2a966d465529df6bc0eaa457b61cec570393
-
SHA256
18fa20d9dc1fbbc542f4116a7c9d01d1f2eefe65810afb097e4c03ff7409423f
-
SHA512
d3f0d0c38d86da4d8195cfd49cd40e07ecc53073902ea8df49eb8dd4abd03f0e62b4a705716693bf2747be39736d46365c846645175ded1983a38df30848bd48
-
SSDEEP
3072:+eXAf4VHZYpLRcWLD2yzwRqkZss7wyJaCbzVQrHpvTJxMnHVbQwrY9gukl10yrVb:+zQlZYpVcQXw0k5TFQzSnFrEC1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a654d179cd6aa248bef8905b6c3d838
Files
-
7a654d179cd6aa248bef8905b6c3d838.exe windows:4 windows x86 arch:x86
af5423a010a1dc0b3ecbd7b6cbccdee2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CloseEnhMetaFile
CreateBitmap
CreateDIBitmap
CreateFontA
CreateFontIndirectW
ExtTextOutA
ExtTextOutW
GetBkMode
GetDIBits
GetROP2
OffsetRgn
SetArcDirection
SetEnhMetaFileBits
StartPage
StrokePath
TextOutW
user32
EndDialog
GetMenu
GetMessagePos
IsWindowEnabled
LoadStringA
MapWindowPoints
PtInRect
SetActiveWindow
SetWindowLongA
WindowFromPoint
shell32
CommandLineToArgvW
DoEnvironmentSubstW
DragQueryFileA
ExtractAssociatedIconW
FindExecutableW
SHAppBarMessage
SHBrowseForFolder
SHBrowseForFolderA
SHBrowseForFolderW
SHCreateDirectoryExA
SHFileOperationA
SHGetFolderPathA
SHGetFolderPathW
SHGetMalloc
SHGetSpecialFolderLocation
SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
ShellExecuteA
ShellExecuteW
Shell_NotifyIconA
kernel32
CompareStringW
DeviceIoControl
FindFirstFileW
FindResourceA
FreeResource
GetFileSize
LocalAlloc
MultiByteToWideChar
OpenProcess
SizeofResource
WaitForSingleObject
comctl32
CreateStatusWindowA
DestroyPropertySheetPage
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetIconSize
ImageList_Replace
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_SetImageCount
ImageList_Write
Sections
.text Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
fLkNYR2m Size: 512B - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE