Static task
static1
Behavioral task
behavioral1
Sample
7b4032fef704bc4350ab00827bb8b155.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7b4032fef704bc4350ab00827bb8b155.exe
Resource
win10v2004-20231215-en
General
-
Target
7b4032fef704bc4350ab00827bb8b155
-
Size
39KB
-
MD5
7b4032fef704bc4350ab00827bb8b155
-
SHA1
d73ede700b317061f66356f2fbae8f806595d738
-
SHA256
a42b3c3ec53541a0617a6bbc6c32257fbb409672034cc15d0599a9993e56eeae
-
SHA512
d903c5d99ce885c76736ac49b80d7b4459929f2fc8f3c2c29223f60e6eaa46d07d56a79a87f89f3e5ac72079887c5cc3b91be33560fd7daa3684606a6ee79ff2
-
SSDEEP
768:aBSlkxC2Xc3f4A4VgR0e72V/5iEhzRszohsr1F42cwChDWmEnuBwEGE0uEnZDI:sfs3DRye72VBiEXsxr1JcwCBWxS0C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7b4032fef704bc4350ab00827bb8b155
Files
-
7b4032fef704bc4350ab00827bb8b155.exe windows:1 windows x86 arch:x86
f9a4d3f4bd5abdaa86ac16301f3828b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
gdi32
GetTextColor
user32
GetMessageW
Sections
PESEC0 Size: 22KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 370B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ