Static task
static1
Behavioral task
behavioral1
Sample
7bcee8b6359fc713279128587615da9b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7bcee8b6359fc713279128587615da9b.exe
Resource
win10v2004-20231215-en
General
-
Target
7bcee8b6359fc713279128587615da9b
-
Size
692KB
-
MD5
7bcee8b6359fc713279128587615da9b
-
SHA1
449d93b04175a0c1172ffb2d5442538c001ba6b5
-
SHA256
80c1c494c33ed20af3862b03ae820d2ffeab940104cca8ae3f3701f907a06a11
-
SHA512
6b2a6a1b12d67d2aad323129621b896ba669edbf966672284098d7bea2983c8ca81a7dff9c1b9a0f5e220914a0dfc53babe5a96c19a250c4a9d35869e7a19927
-
SSDEEP
12288:PLcYtP4x4wSwvtnojhOHAClvNT4qRvLlNKNAphYtjSEoQTelQI609GnrD:PLcYOSwv6ogClvNMqFLlwkSSqTexGrD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7bcee8b6359fc713279128587615da9b
Files
-
7bcee8b6359fc713279128587615da9b.exe windows:4 windows x86 arch:x86
eec8a95120f6fc561458cd0725dcfee7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetVersion
CloseHandle
CreateEventA
GetVersionExA
GetFileSize
GetStartupInfoA
GlobalFree
Sleep
FreeLibrary
GetLastError
LocalAlloc
GlobalAlloc
lstrcpyA
GetCommandLineA
lstrlenA
LocalFree
GetTickCount
GetModuleHandleA
lstrcatA
gdi32
GetTextMetricsA
GetStockObject
CreateSolidBrush
GetTextExtentPoint32A
CreateCompatibleDC
SelectObject
DeleteObject
CreateFontIndirectA
MoveToEx
PatBlt
LineTo
GetPixel
GetTextColor
GetBkColor
msvcrt
exit
__getmainargs
_except_handler3
_c_exit
wcschr
_XcptFilter
wcslen
memmove
__p__commode
wcstoul
rand
__set_app_type
__p__fmode
__CxxFrameHandler
_adjust_fdiv
_initterm
_controlfp
__setusermatherr
_acmdln
_exit
user32
GetMessageA
MessageBoxA
DispatchMessageA
CreateWindowExA
ShowWindow
EndPaint
DefWindowProcA
DialogBoxParamA
ScreenToClient
LoadIconA
GetSysColor
SetFocus
TranslateMessage
GetClientRect
GetFocus
DestroyWindow
EndDialog
GetWindowRect
BeginPaint
SetWindowTextA
PostQuitMessage
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 672KB - Virtual size: 676KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 720KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ