Static task
static1
Behavioral task
behavioral1
Sample
7e2f1097528543e44183ae1c86c3a958.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7e2f1097528543e44183ae1c86c3a958.exe
Resource
win10v2004-20231215-en
General
-
Target
7e2f1097528543e44183ae1c86c3a958
-
Size
123KB
-
MD5
7e2f1097528543e44183ae1c86c3a958
-
SHA1
1ca5badef9f1f081aa167b83392d78cb3dd43053
-
SHA256
71f935b7af8e8e5344ce74b4627173a025cb797ef18a95cb7bda77d86335646c
-
SHA512
7a4c75ef92419b46c88f605020be5b14d604647a1a0468548dbb3a0fc25b16d7fb0145f57231972bf9aba30467c500508ac205ab1fd3408d53ddb2084f95f987
-
SSDEEP
3072:S8JHCWWsI/eF14GQF9TJ5fXEsOQbI0gPG:SNWimpA1fXEvQMz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e2f1097528543e44183ae1c86c3a958
Files
-
7e2f1097528543e44183ae1c86c3a958.exe windows:5 windows x86 arch:x86
867b459d1d5998aab2949229426b771c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadMenuA
CopyImage
AlignRects
DialogBoxParamA
EndDialog
GetCursor
DialogBoxParamW
GetWindowTextLengthA
DrawTextW
LoadCursorA
GetDC
CloseWindow
CopyRect
GetWindowTextA
DrawTextA
CopyIcon
BeginPaint
CopyRect
GetWindowTextA
DrawIcon
GetCursor
InsertMenuA
GetDC
BlockInput
AppendMenuA
IsMenu
EndDialog
GetMenu
CopyImage
LoadCursorA
CopyRect
EndDialog
GetWindowTextA
AppendMenuA
IsWindow
DrawIcon
GetMenu
IsMenu
CopyImage
GetDlgItem
GetCursor
AppendMenuW
CopyIcon
GetFocus
BlockInput
GetDC
CreateIcon
AlignRects
IsMenu
CloseWindow
LoadMenuA
GetDC
BeginPaint
GetFocus
GetMenu
BlockInput
InsertMenuA
IsWindow
DrawIcon
GetDlgItem
LoadCursorA
CopyIcon
GetWindowTextLengthA
CalcMenuBar
EndDialog
LoadCursorA
CreateIcon
GetWindowTextLengthA
BeginPaint
GetWindowTextA
DrawIcon
CopyRect
AppendMenuW
GetCursor
CalcMenuBar
IsMenu
AppendMenuA
CopyImage
GetMenu
kernel32
GetPriorityClass
GetLastError
GetCommandLineA
DeleteFileA
ExitThread
AddAtomA
FreeResource
CopyFileExA
WriteFile
GetCPInfo
CopyFileA
AddAtomW
FindAtomW
GlobalFree
OpenFileMappingA
FindAtomA
WriteFile
DeleteFileA
CreateDirectoryA
DeleteFileW
GetLocalTime
GetCommandLineA
GetPriorityClass
GetFileType
ExitThread
DeleteAtom
ExitProcess
ReadFile
FlushFileBuffers
FreeResource
CopyFileExW
OpenFile
GlobalFree
FindClose
CopyFileA
AddAtomW
GetLastError
AddAtomA
CopyFileExA
FindAtomA
GetFileTime
GetCPInfo
FatalExit
GetStdHandle
DeleteFileA
ExitThread
DeleteFileW
FlushFileBuffers
GetCommandLineA
AddAtomW
GetPriorityClass
FreeResource
GetCPInfo
CreateDirectoryA
OpenFile
GetLastError
GetStdHandle
CopyFileA
CopyFileExW
ExitProcess
DeleteFileA
ExitThread
CopyFileA
DeleteAtom
GetFileTime
GetCommandLineA
CopyFileExA
GetPriorityClass
AddAtomW
GetLastError
GetCPInfo
FindAtomW
ExitProcess
GetStdHandle
FlushFileBuffers
GetLocalTime
advapi32
RegDeleteKeyA
RegEnumValueW
RegDeleteValueW
RegQueryValueExW
RegOpenKeyExA
RegFlushKey
RegGetKeySecurity
RegLoadKeyA
RegCreateKeyW
RegLoadKeyW
RegReplaceKeyW
RegEnumValueA
RegCreateKeyW
RegOpenKeyExA
RegCreateKeyA
RegReplaceKeyA
RegEnumValueW
RegLoadKeyW
RegQueryInfoKeyA
RegOpenKeyExW
RegLoadKeyA
RegDeleteKeyW
RegEnumKeyExW
RegDeleteKeyA
RegCreateKeyExA
RegEnumValueA
RegFlushKey
RegOpenKeyW
RegCreateKeyA
RegLoadKeyW
RegOpenKeyExA
RegDeleteValueW
RegEnumKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegCreateKeyW
RegCreateKeyExW
RegQueryValueExW
RegEnumKeyW
RegGetKeySecurity
RegEnumKeyExW
RegQueryInfoKeyA
RegDeleteValueW
RegCreateKeyExW
RegEnumKeyExA
RegLoadKeyA
RegLoadKeyW
RegEnumValueW
RegCreateKeyW
RegQueryValueExW
RegOpenKeyW
RegDeleteKeyW
RegDeleteKeyA
RegReplaceKeyW
RegDeleteValueA
RegEnumKeyA
RegOpenKeyExW
RegReplaceKeyW
RegEnumKeyExW
RegCreateKeyExW
RegOpenKeyExA
RegGetKeySecurity
RegEnumKeyA
RegDeleteValueW
RegDeleteKeyA
RegOpenKeyW
RegDeleteValueA
RegQueryInfoKeyW
RegCreateKeyW
RegFlushKey
RegEnumValueW
RegDeleteValueA
RegLoadKeyW
RegReplaceKeyW
RegDeleteValueW
RegEnumKeyExW
RegQueryValueExW
RegLoadKeyA
RegOpenKeyExA
RegEnumKeyExA
RegGetKeySecurity
RegCreateKeyA
RegQueryValueA
RegDeleteKeyW
RegEnumKeyA
Sections
.70bd Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.e4ee7 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.b2810 Size: 72KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bb37 Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ