Static task
static1
Behavioral task
behavioral1
Sample
7a9eaa60b02f570998726f39c2af932d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7a9eaa60b02f570998726f39c2af932d.exe
Resource
win10v2004-20231215-en
General
-
Target
7a9eaa60b02f570998726f39c2af932d
-
Size
46KB
-
MD5
7a9eaa60b02f570998726f39c2af932d
-
SHA1
fe84044f0c4675520d9291787b82ae57e5a3e125
-
SHA256
a9c052d01e34a0792decaef3403add317cd244f205d37432d9615d845e0955d9
-
SHA512
ec0fd470f83203b0fdf406aa8c566386e63628b1843b7941b6199cd5b7b04cf7776d77f2c1749fcfdaa5a3b0012edba0936263bdb354c265ea891d7873d79264
-
SSDEEP
768:kpBfdcA/ep1cOCTlwRDsZS7pXQBjE84L/AzCowu6jiUsjSl:wBfdcA/edaZS7pXoGowb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a9eaa60b02f570998726f39c2af932d
Files
-
7a9eaa60b02f570998726f39c2af932d.exe windows:5 windows x86 arch:x86
647a2e73cea389f0c4374970c215bad9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileAttributesW
ReleaseMutex
CreateThread
GetSystemTimeAsFileTime
SetFilePointer
lstrcatA
GetProcessTimes
CreateFileMappingW
FlushFileBuffers
LeaveCriticalSection
SetThreadPriority
SystemTimeToFileTime
GetDriveTypeW
SetLastError
OpenMutexW
CreateFileW
GlobalUnlock
GlobalLock
SetEvent
IsBadReadPtr
lstrcpyA
GetSystemTime
Sleep
OpenProcess
lstrlenW
WriteFile
CloseHandle
GetCurrentProcessId
CopyFileW
InitializeCriticalSection
GetFileSize
MultiByteToWideChar
CreateDirectoryW
GetThreadPriority
GetModuleFileNameA
lstrcmpiA
lstrcpynW
WideCharToMultiByte
SetEndOfFile
SetFileTime
ResetEvent
MoveFileExW
UnmapViewOfFile
GetLastError
HeapReAlloc
lstrcpyW
GetLogicalDrives
GetLocalTime
FindNextFileW
GetTimeZoneInformation
GetUserDefaultUILanguage
CreateProcessW
GetFileTime
ReadFile
GetExitCodeProcess
GetCommandLineA
HeapFree
GetFileSizeEx
GetTickCount
CreateMutexW
GetModuleFileNameW
GetProcessHeap
GetVersionExW
DeleteFileW
lstrcatW
WriteProcessMemory
GetComputerNameW
WaitForSingleObject
GetModuleHandleA
GetCurrentThreadId
GetTempFileNameW
FindFirstFileW
DisconnectNamedPipe
HeapAlloc
FindClose
lstrlenA
EnterCriticalSection
GetTempPathW
FindResourceW
lstrcmpiW
ExpandEnvironmentStringsW
MapViewOfFile
CreateEventW
user32
ToUnicode
GetDlgItem
GetIconInfo
GetMessageA
GetWindowTextW
GetWindowThreadProcessId
OpenDesktopA
GetWindowLongW
Sections
.balgn Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.onab Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jad Size: 7KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ