Static task
static1
Behavioral task
behavioral1
Sample
7adf01a4876a3d2ac0fb30aa36c347a9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7adf01a4876a3d2ac0fb30aa36c347a9.exe
Resource
win10v2004-20231222-en
General
-
Target
7adf01a4876a3d2ac0fb30aa36c347a9
-
Size
157KB
-
MD5
7adf01a4876a3d2ac0fb30aa36c347a9
-
SHA1
7753edf73dacbf2255140f8e6bc19842c6c10924
-
SHA256
21f54e4a5e57a349abb593595b9dc2c3f58550cfe371a787baa09eda43645763
-
SHA512
68b69a81f69807e209e3b0ee1b96214a043d5823dbc676a25dc5c412aecb122b301e9606557478d58c72e25bf229c896cbff20ff98adb4b37153437c588901ba
-
SSDEEP
1536:6lUjG10WcAdJiykolrbibonqEJ5L3Reqvy/b6LxLqAfK/:cFKWJeykolrbUM7OMqwWsO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7adf01a4876a3d2ac0fb30aa36c347a9
Files
-
7adf01a4876a3d2ac0fb30aa36c347a9.exe windows:1 windows x86 arch:x86
8833a338425ff24006fe0429a8043fe9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoW
LoadLibraryA
InitializeCriticalSection
GetVersionExA
GetCurrentThreadId
lstrcpyW
FreeLibrary
GetStartupInfoA
GetLastError
GetStartupInfoW
GetVersionExA
HeapDestroy
SetEvent
LocalFree
GetACP
GetProcAddress
GetStartupInfoA
GetVersionExA
GetVersionExA
lstrcmpiW
HeapReAlloc
TerminateProcess
GetCurrentThreadId
ReadFile
SetEvent
CreateThread
InterlockedIncrement
Sleep
WideCharToMultiByte
GetModuleFileNameA
Sections
.test Size: 143KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.test Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.test Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.test Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.test Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.test Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.test Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE