Static task
static1
Behavioral task
behavioral1
Sample
7e49958fb7a502412683e299e0e21735.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7e49958fb7a502412683e299e0e21735.exe
Resource
win10v2004-20231215-en
General
-
Target
7e49958fb7a502412683e299e0e21735
-
Size
72KB
-
MD5
7e49958fb7a502412683e299e0e21735
-
SHA1
789f8a3ae1b1972b74d62df28c24d3ced9e60d0f
-
SHA256
4e0eb916233929b089eb017cad82237ac7b73f4595b5e8acf15f106af177e128
-
SHA512
1ee457f055c186edb69b32d7b73fc852c01c9fe69e2a4be01bbac8435711c43961eeb6b430048c2632f4417d3edce9fbde8f9c1d17031bb42fb0962f0dd026f3
-
SSDEEP
1536:V1k4gVO3pHkwF5hib7LTFZ6jBV/OK+WZTqYFKPdY:V1pgVO3F5hieFOK9V2e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e49958fb7a502412683e299e0e21735
Files
-
7e49958fb7a502412683e299e0e21735.exe windows:4 windows x86 arch:x86
dc86fcb91da24bcf3c83295d05c221cd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetModuleHandleA
GetLastError
SetLastError
CloseHandle
GetProcAddress
Sleep
Beep
GetCommandLineA
CreateThread
FreeLibrary
GlobalFree
ExitProcess
GlobalAlloc
GetStartupInfoA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyA
msvcrt
strstr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE