Static task
static1
Behavioral task
behavioral1
Sample
7c36c8a627cd01eb117ff6add4c3326b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7c36c8a627cd01eb117ff6add4c3326b.exe
Resource
win10v2004-20231215-en
General
-
Target
7c36c8a627cd01eb117ff6add4c3326b
-
Size
36KB
-
MD5
7c36c8a627cd01eb117ff6add4c3326b
-
SHA1
661c776ea040c9a075d82b3c0508ec43dc835f0c
-
SHA256
36f4bf86f434c00f43a0338dce7f437d0caf430d9e856d9c84c0a1e0272caacb
-
SHA512
80144c2dfd22fae0bc445f1a3baf6759a698d00d9d4f07a06955f224cd5f31bb545df41a7667a20073d56f0ed2fd51d5987c910aa8d5b314a6fef2ccad42ff51
-
SSDEEP
384:+BH0KzLJruxwzGTYTSFNzi1mlOZTMDg0r0G3+MJ/LyQng3vc32Jvo8Chf7:+dZzLJr/zEYTmz06Lr0G5dng3UKvoL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c36c8a627cd01eb117ff6add4c3326b
Files
-
7c36c8a627cd01eb117ff6add4c3326b.exe windows:4 windows x86 arch:x86
60249eda990c5897456d0665caac12fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
GetComputerNameA
SetCurrentDirectoryA
lstrlenA
GetModuleFileNameA
lstrcatA
GetLocalTime
GetStringTypeA
LCMapStringW
LCMapStringA
lstrcmpA
CopyFileA
DeleteFileA
CreateDirectoryA
CreateProcessA
MultiByteToWideChar
ReadFile
SetEndOfFile
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
CloseHandle
WriteFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
GetCPInfo
GetStringTypeW
user32
FindWindowA
SendMessageA
advapi32
RegOpenKeyExA
RegSetValueExA
RegCloseKey
GetUserNameA
wininet
FtpCreateDirectoryA
InternetCloseHandle
InternetConnectA
InternetOpenA
FtpPutFileA
FtpSetCurrentDirectoryA
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ