Static task
static1
Behavioral task
behavioral1
Sample
7c2b3b95a37d609345924f58614e6436.exe
Resource
win7-20231215-en
General
-
Target
7c2b3b95a37d609345924f58614e6436
-
Size
279KB
-
MD5
7c2b3b95a37d609345924f58614e6436
-
SHA1
6c8bb889c86cc1b45861213c4d3fa0ea96661869
-
SHA256
b2eb38f3679aae6061a862c13715570bd1fb2d679b537da9669dc4697ee13a8d
-
SHA512
2c3c94fb0a73a3008c622e8cad5b5bbe70b1368078ada55ddee25d0cb314ca5c0cf2c2180034320e201071f632e29ba422bc95ee17f4d577143d3bf113520ee6
-
SSDEEP
3072:4SLMWISRM7Z46+PnSApWR3WJNBxRiseyXgtcaQYV2ml4m9bF7tteaos+fAOMGuMo:4S4RhqLVZJjzazX/HoNfA0mqcK5wpRp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c2b3b95a37d609345924f58614e6436
Files
-
7c2b3b95a37d609345924f58614e6436.exe windows:4 windows x86 arch:x86
b4ed76fe24c718a5ef51c43691a5ee48
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
FreeEnvironmentStringsA
GlobalFindAtomW
GetFullPathNameA
IsBadReadPtr
SetUnhandledExceptionFilter
SetStdHandle
FindFirstFileA
GetStringTypeA
WriteFile
FreeEnvironmentStringsW
SetFilePointer
LCMapStringW
GetCPInfo
GetEnvironmentStrings
VirtualProtect
GetEnvironmentStringsW
EnumResourceNamesA
GetOEMCP
LCMapStringA
FlushFileBuffers
GetStringTypeW
GetDiskFreeSpaceA
UnhandledExceptionFilter
GetThreadLocale
CreateFileA
GetStringTypeExW
IsBadCodePtr
ReadFile
GetFileAttributesA
WideCharToMultiByte
MulDiv
shlwapi
SHGetInverseCMAP
PathIsFileSpecA
PathIsContentTypeA
SHCreateStreamOnFileEx
PathAppendA
PathCreateFromUrlW
rpcrt4
RpcStringFreeA
Sections
.text Size: 140KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ