Static task
static1
Behavioral task
behavioral1
Sample
7ade60f7d74118575f6490ff4392d3d5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7ade60f7d74118575f6490ff4392d3d5.exe
Resource
win10v2004-20231215-en
General
-
Target
7ade60f7d74118575f6490ff4392d3d5
-
Size
876KB
-
MD5
7ade60f7d74118575f6490ff4392d3d5
-
SHA1
2f5a8916d9f632a0e07e5f46437900febdf553af
-
SHA256
edd799e2a2995e3df6d8fecad7fd9a9c65a4980d63a731e2ce1e8b21a8a9521d
-
SHA512
cb90459424ac016abc42f02a43a2f952f9eec9792b7906b7ae0a996200e69944ddaaba4e8bb01f7b206a35212c6ff175c9bf0a2647ec843cea04915a670152bb
-
SSDEEP
24576:szXRQC1dwPExcGw7eSAZrKZp4f8f5oyZA:MXRQxGYeRZrTGoc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ade60f7d74118575f6490ff4392d3d5
Files
-
7ade60f7d74118575f6490ff4392d3d5.exe windows:4 windows x86 arch:x86
1900677b5d9c5f3e33ce6c60215126d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
GetMenu
gdi32
CreateRectRgnIndirect
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
advapi32
RegDeleteKeyA
comctl32
InitCommonControlsEx
shlwapi
PathStripToRootA
oledlg
ord8
ole32
CoTaskMemFree
oleaut32
VariantTimeToSystemTime
wininet
InternetOpenA
psapi
GetModuleFileNameExA
Sections
.text Size: 228KB - Virtual size: 227KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsc0 Size: 172KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsc1 Size: 144KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsc2 Size: 84KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 172KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ