Static task
static1
Behavioral task
behavioral1
Sample
7e2f054550a6cdc49d56f3fb4601be68.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7e2f054550a6cdc49d56f3fb4601be68.exe
Resource
win10v2004-20231222-en
General
-
Target
7e2f054550a6cdc49d56f3fb4601be68
-
Size
158KB
-
MD5
7e2f054550a6cdc49d56f3fb4601be68
-
SHA1
a68da666189914d1ad7bbac2518fa7047ecfd2a3
-
SHA256
13de03bc4574603842526039a4d367a93d2094ba2e863c001de11378b494c9b2
-
SHA512
08a6f72a6f4b24da7c6895652897076fe3173e493ba5aeba24c61107bff6dff898c8e777b45abd754d6543767edd23ddd7fe51a788b749ee9b060e16999c276b
-
SSDEEP
1536:RoFmDeTmTmxzaLeUIwSIKOmJELHGOeU9w:RtsxGLQwS3OQELH/g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e2f054550a6cdc49d56f3fb4601be68
Files
-
7e2f054550a6cdc49d56f3fb4601be68.exe windows:1 windows x86 arch:x86
1f2012b92a702a9e1913a3b9a8e5b044
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
VirtualAlloc
CreateThread
CloseHandle
ExitProcess
UnhandledExceptionFilter
LocalFree
HeapAlloc
lstrcpyW
GetLastError
HeapFree
LocalFree
GetCurrentThreadId
CreateFileW
SetFilePointer
LocalAlloc
ExitProcess
FreeLibrary
GetACP
QueryPerformanceCounter
GetACP
GetSystemTimeAsFileTime
SetLastError
SetUnhandledExceptionFilter
lstrlenW
GetProcessHeap
DeleteCriticalSection
LeaveCriticalSection
FormatMessageW
GetCurrentProcessId
lstrlenW
GetProcessHeap
VirtualAlloc
LoadLibraryA
GetTickCount
GetSystemTimeAsFileTime
LocalFree
InterlockedDecrement
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetACP
LocalAlloc
MultiByteToWideChar
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetProcAddress
Sections
.text Size: 141KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE