Static task
static1
Behavioral task
behavioral1
Sample
7c18458bc550ffbe322e68bd23a5f57d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7c18458bc550ffbe322e68bd23a5f57d.exe
Resource
win10v2004-20231215-en
General
-
Target
7c18458bc550ffbe322e68bd23a5f57d
-
Size
204KB
-
MD5
7c18458bc550ffbe322e68bd23a5f57d
-
SHA1
2804bce6fc0412dd7e6968f2daa14c45e412dcca
-
SHA256
e78f734fe00397c1cf49ce2e6e7ac12c24c045985241cc1acd2eb1ae061faaf8
-
SHA512
974c3fe377952bb857ca98254326a3da15159da845a5b30bc8e440503cfa86ea3d197243e1f7843018cb187c796abc594ef31df6fa10db5fd77f8e3ad07cf718
-
SSDEEP
3072:Zvms7ThC4jubvsFUM2jneHaLpKkgJJoZDYpekFKIW0w9QNy9+b+NozqsQVh0b:ZuKAPpKEDYpekFKlfZoza
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c18458bc550ffbe322e68bd23a5f57d
Files
-
7c18458bc550ffbe322e68bd23a5f57d.exe windows:4 windows x86 arch:x86
24a6f505572d7d5052cc775c589ec8b8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__commode
__p__fmode
__set_app_type
_adjust_fdiv
_except_handler3
_controlfp
_mkdir
_chdir
_getcwd
strncmp
_pctype
_isctype
__mb_cur_max
realloc
strchr
calloc
free
rewind
_initterm
__setusermatherr
_ftol
getc
memcpy
_iob
fscanf
strlen
tmpnam
strcpy
strcat
strcmp
asctime
memcmp
memmove
memchr
fmod
floor
ceil
fabs
labs
abs
putchar
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
fgets
atof
printf
atol
atoi
strncpy
sprintf
_snprintf
getchar
time
localtime
fprintf
vfprintf
fclose
fopen
_errno
toupper
memset
_unlink
kernel32
GlobalHandle
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
ExitProcess
LockFile
UnlockFile
Sleep
FlushFileBuffers
CreateFileA
CloseHandle
MoveFileA
DeleteFileA
SetHandleCount
GetCurrentProcess
SetPriorityClass
ReadFile
WriteFile
SetFilePointer
GetLastError
GetFileSize
user32
wsprintfA
LoadStringA
wvsprintfA
MessageBoxA
Sections
.text Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE