Static task
static1
Behavioral task
behavioral1
Sample
7a7ba51b0ced9d6e22da1ac5022e7471.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7a7ba51b0ced9d6e22da1ac5022e7471.exe
Resource
win10v2004-20231215-en
General
-
Target
7a7ba51b0ced9d6e22da1ac5022e7471
-
Size
36KB
-
MD5
7a7ba51b0ced9d6e22da1ac5022e7471
-
SHA1
ca80320c7b4d38b60638984d066446864b9ac78a
-
SHA256
e09e52ee3acd73c4a18a242d0ec1b70e519482791a0de3be4ae415bb41c1ffbf
-
SHA512
f82caf82a59d3d50bbbe41cc1501badc1517c840e055f6c12aac48397b3119e2e8ade22209aa12f123c5dd68bc268b026e9a0eabb8e5d96f7603ab3ceabeca74
-
SSDEEP
384:mts6XwHR0TTXH/8sJG3mCULSf6a5S5zJieZw+80MNbxK5SIdlm7XVlwhLc:ULv/8sQ3m5xvieZzlMVxKACUDz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a7ba51b0ced9d6e22da1ac5022e7471
Files
-
7a7ba51b0ced9d6e22da1ac5022e7471.exe windows:4 windows x86 arch:x86
95c6bd9d650086f448831eaaf83f9711
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
lstrcpyA
GetSystemTime
GetModuleHandleA
GetLastError
CreateMutexA
GetCurrentThreadId
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
WideCharToMultiByte
GetWindowsDirectoryA
lstrlenA
lstrcmpA
GetProcAddress
LoadLibraryA
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
FlushInstructionCache
GetCurrentProcess
GetStartupInfoA
SetCurrentDirectoryA
GetModuleFileNameA
FindFirstFileA
lstrcpynA
lstrlenW
GetFileAttributesA
user32
DispatchMessageA
ShowWindow
wsprintfA
DestroyWindow
GetMessageA
TranslateMessage
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyA
RegSetValueExA
ole32
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
DispCallFunc
SysAllocStringLen
SysAllocString
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayCreate
SafeArrayUnaccessData
SysStringLen
LoadRegTypeLi
VariantClear
SysFreeString
SafeArrayGetLBound
msvcrt
__CxxFrameHandler
_controlfp
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
__set_app_type
_XcptFilter
_exit
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
??3@YAXPAX@Z
_close
_write
_read
_eof
_open
strcat
strcpy
_itoa
exit
free
??2@YAPAXI@Z
memcpy
sprintf
strstr
memcmp
strlen
fclose
fopen
__p__fmode
msvcp60
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE