Static task
static1
Behavioral task
behavioral1
Sample
7b010c8f99f488bec87ec5c4a0995794.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7b010c8f99f488bec87ec5c4a0995794.exe
Resource
win10v2004-20231215-en
General
-
Target
7b010c8f99f488bec87ec5c4a0995794
-
Size
18KB
-
MD5
7b010c8f99f488bec87ec5c4a0995794
-
SHA1
f314ff11e05d016002e71b995dd7f3c1da022826
-
SHA256
89ccf2b67a94a56351d8615541b25bb2781b1c026caa9f95789f4420cf595219
-
SHA512
4b5dedda605ec2526c70ca499309d7dc1a28e75ea823279f466251234b9c9e1eb8732327785bf42a9b133128b8101480291e2c5548d26d5695bd6bec67b437d6
-
SSDEEP
192:OatC8S/Y7iKnLUMyYyMZ3YA9AC6LmWnntDoyLn9CZz6br9fJr6rAxKIdU3rOvWtj:g/YZnNZ3wC6TRoi9krRtR66DR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7b010c8f99f488bec87ec5c4a0995794
Files
-
7b010c8f99f488bec87ec5c4a0995794.exe windows:4 windows x86 arch:x86
e6db3cf6aa1cdc6c0403c53d7543039f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
GetCurrentProcessId
GetEnvironmentStringsA
HeapCreate
LoadLibraryExA
GetACP
DeleteAtom
CreateFileMappingA
GetCommConfig
CreateHardLinkA
GetModuleHandleA
GetCurrentThread
GetTimeFormatA
GetLogicalDrives
InterlockedExchange
CreateThread
GetCurrentProcess
IsDebuggerPresent
VirtualProtect
HeapDestroy
GetThreadPriority
user32
ShowWindow
SetForegroundWindow
GetClassNameA
GetParent
SetActiveWindow
ReleaseDC
GetWindow
wsprintfA
DrawTextA
GetTitleBarInfo
FillRect
DragDetect
GetFocus
GetDlgItem
GetWindowTextLengthA
FrameRect
GetCursorPos
BeginPaint
EndPaint
advapi32
RegFlushKey
RegEnumKeyA
RegCreateKeyA
RegQueryInfoKeyA
RegCloseKey
clbcatq
CoRegCleanup
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ