Static task
static1
Behavioral task
behavioral1
Sample
7c028509edc1dca7fba78d55eeadcc53.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7c028509edc1dca7fba78d55eeadcc53.exe
Resource
win10v2004-20231215-en
General
-
Target
7c028509edc1dca7fba78d55eeadcc53
-
Size
11KB
-
MD5
7c028509edc1dca7fba78d55eeadcc53
-
SHA1
4fd93029bc3b8c8f7e31c28bad04a2f5d88ba33d
-
SHA256
b620abf5a6bc3c81900b6edac51bbc6263a2e350cbfedb0671808dd1ef87c14b
-
SHA512
fd0bf8d7106efb6e37cfec58bfcd850a44acf7ce7ff6348b6c05811b222f080482b6e09eb0f716a17fbb3428f9595a2088e6809dd3755e1452c4870487b38e64
-
SSDEEP
96:dWMserrcUi9gxHTi+hMufFXg+tpisXv8LsNwoxkdDxK7V5xoo5BmXKzEuC3PsC50:PZH+VWw8x5xYQjxoxg/C3PnzQrTWa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c028509edc1dca7fba78d55eeadcc53
Files
-
7c028509edc1dca7fba78d55eeadcc53.exe windows:4 windows x86 arch:x86
7c2ffca8c88a06ab0e113c98b6fa714b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetModuleHandleA
GetModuleHandleA
GetModuleHandleA
GetModuleHandleA
GetModuleHandleA
GetModuleHandleA
GetTempFileNameA
GetTempPathA
GlobalAlloc
LoadResource
CreateMutexA
ReleaseMutex
RtlMoveMemory
RtlZeroMemory
SetFilePointer
SizeofResource
WinExec
WriteFile
lstrcatA
lstrcmpiA
lstrlenA
CreateFileA
CopyFileA
LockResource
CloseHandle
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA
advapi32
RegCreateKeyA
RegSetValueExA
RegCloseKey
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE