Static task
static1
Behavioral task
behavioral1
Sample
7c3fdd1c93e02262cd61f7c962110661.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7c3fdd1c93e02262cd61f7c962110661.exe
Resource
win10v2004-20231222-en
General
-
Target
7c3fdd1c93e02262cd61f7c962110661
-
Size
52KB
-
MD5
7c3fdd1c93e02262cd61f7c962110661
-
SHA1
89d86848f7dc0f3790bae6c423ff24480d0e5de6
-
SHA256
e539372cc0c3425e11ae5777be813eddd064575ae24e595e605f195281633734
-
SHA512
6a6febd886e3ec9bb1f1f363310b34cecc794e3c44c5303bc5ec7da88b7b9cacca4642e3fce5138141190dc39105de86ce054fe6c09400a640988cf100a58ae3
-
SSDEEP
1536:3Uq+pnK4RCL8RmoV1Uq+pnK4RCL8RmoV:3kpnb8L8QoV1kpnb8L8QoV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c3fdd1c93e02262cd61f7c962110661
Files
-
7c3fdd1c93e02262cd61f7c962110661.exe windows:4 windows x86 arch:x86
cc877af1f2f4c887682590e3f95bfc0d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
WriteFile
DeleteFileA
ReadFile
CloseHandle
GetFileSize
CreateFileA
CreateThread
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetModuleFileNameA
GetACP
GetCPInfo
RtlUnwind
CopyFileA
CreateDirectoryA
GetWindowsDirectoryA
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
Sleep
WinExec
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
GetStringTypeW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetOEMCP
lstrcpynA
HeapReAlloc
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
user32
wsprintfA
ShowWindow
UpdateWindow
DispatchMessageA
TranslateMessage
GetMessageA
LoadIconA
GetDesktopWindow
CreateDialogParamA
advapi32
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA
wsock32
sendto
socket
WSAStartup
ioctlsocket
htons
connect
recvfrom
ole32
CoInitialize
CoCreateInstance
shell32
Shell_NotifyIconA
comctl32
InitCommonControlsEx
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ