Static task
static1
Behavioral task
behavioral1
Sample
7e2e2b2d7d3d9a3843d2d5d093ae562e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7e2e2b2d7d3d9a3843d2d5d093ae562e.exe
Resource
win10v2004-20231222-en
General
-
Target
7e2e2b2d7d3d9a3843d2d5d093ae562e
-
Size
702KB
-
MD5
7e2e2b2d7d3d9a3843d2d5d093ae562e
-
SHA1
77993d511e6e24d8d90646474b55cd5c4b369cba
-
SHA256
c6ea1ca09f1d4a58490297a074b2064c24b926f05c418a2c26a8f1a93ea24a97
-
SHA512
89f2080a13c759c5e092b879e3efee34a560de5718489c10fb9fbd2fd2be8106f4e25ddc9a8ee44fbba5b8d1b3a9e98944070639b1e3c6f0837487522669a5b1
-
SSDEEP
12288:KEpV4xWzINXiC2QWEtnJB7TRKqc7zcfqyRh:KEHzINyC3PJb7NKH7zuqI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e2e2b2d7d3d9a3843d2d5d093ae562e
Files
-
7e2e2b2d7d3d9a3843d2d5d093ae562e.exe windows:4 windows x86 arch:x86
452f0d4f76ce0d2149d809ccb9ef71c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
VariantChangeType
SafeArrayUnaccessData
SafeArrayCreate
SafeArrayGetLBound
kernel32
ExitProcess
GlobalReAlloc
GetPrivateProfileStringW
lstrcmpA
GetDriveTypeW
FindFirstFileW
FlushFileBuffers
GetSystemInfo
CreateMutexA
WritePrivateProfileSectionA
GetCurrentProcess
GetThreadPriority
WriteFile
SetHandleCount
GetTempPathW
IsValidLocale
LoadLibraryExA
SwitchToFiber
SetSystemTime
GetCommState
Beep
GetStringTypeExW
GetACP
GetDateFormatA
GetSystemTimeAsFileTime
FlushConsoleInputBuffer
_llseek
IsProcessorFeaturePresent
VirtualProtect
GlobalUnlock
SetEnvironmentVariableA
GetBinaryTypeA
FatalAppExitA
EnumDateFormatsW
ReadConsoleInputW
user32
FillRect
SwapMouseButton
IsDialogMessageW
GetSysColorBrush
ole32
CoReleaseServerProcess
OleInitialize
comctl32
ImageList_EndDrag
ImageList_Add
ImageList_SetOverlayImage
ImageList_DragShowNolock
msvcrt
_getpid
sscanf
iswctype
fscanf
_fsopen
_tempnam
vwprintf
_endthreadex
fputc
_popen
_mkdir
toupper
rewind
vfwprintf
_waccess
Sections
.text Size: 315KB - Virtual size: 315KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 372KB - Virtual size: 371KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ