Static task
static1
Behavioral task
behavioral1
Sample
7c63aaadc6d17aa1a4e89e2cde8b5f2f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7c63aaadc6d17aa1a4e89e2cde8b5f2f.exe
Resource
win10v2004-20231215-en
General
-
Target
7c63aaadc6d17aa1a4e89e2cde8b5f2f
-
Size
190KB
-
MD5
7c63aaadc6d17aa1a4e89e2cde8b5f2f
-
SHA1
3f512291a881772f1bc4e1f9e7ff48fa2cdfb35d
-
SHA256
8426d6b2dd8446acce1966c7d5d6188955d55bea3e1c0a059bcac547f28efec3
-
SHA512
970c3a29df675de1661c081add59588134ffa509e72315685fa71ed3556f958e9c051923b0a02f3ecdd2227dbb65e42f7f5e501941752dc4834c51188fda8afd
-
SSDEEP
3072:N7bXXEWNu8GPeLXUVHYI96sWmkVFfCtNUA2XKSkvZAkVXr+1+3USm8:FbnT8QUVXotmKFpFX81VX0g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c63aaadc6d17aa1a4e89e2cde8b5f2f
Files
-
7c63aaadc6d17aa1a4e89e2cde8b5f2f.exe windows:4 windows x86 arch:x86
029748ebfe6215827e59e9d3d716eaea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateBitmap
SetBkMode
RestoreDC
SelectPalette
GetDIBColorTable
BitBlt
shlwapi
PathIsContentTypeA
comctl32
ImageList_DrawEx
ImageList_Write
ImageList_Destroy
ImageList_Remove
user32
DrawIcon
AdjustWindowRectEx
GetKeyboardLayoutNameA
GetCursor
DefWindowProcA
GetPropA
SendMessageA
GetClientRect
EnableScrollBar
PeekMessageA
GetMenu
GetMenuItemID
SendMessageW
FillRect
LoadKeyboardLayoutA
SetScrollRange
SetCursor
CharToOemA
GetMenuItemCount
CharNextA
InsertMenuItemA
GetLastActivePopup
RegisterClipboardFormatA
DrawEdge
ClientToScreen
UpdateWindow
UnhookWindowsHookEx
GetDesktopWindow
PtInRect
SetMenuItemInfoA
IsWindowVisible
CreateMenu
DeleteMenu
CreateWindowExA
DestroyMenu
GetClipboardData
SetCapture
WaitMessage
BeginPaint
GetScrollPos
GetKeyNameTextA
SetWindowPos
GetWindow
IsWindowUnicode
EnumWindows
KillTimer
RedrawWindow
CallNextHookEx
IsIconic
IsWindow
EnumThreadWindows
ActivateKeyboardLayout
SetParent
IsDialogMessageW
GetParent
GetWindowDC
GetIconInfo
DestroyCursor
ChildWindowFromPoint
SetMenu
PostQuitMessage
GetSysColor
ScreenToClient
GetMenuState
InvalidateRect
GetDC
EndPaint
SetClipboardData
DispatchMessageA
DrawMenuBar
EqualRect
GetDlgItem
GetMessagePos
wsprintfA
CharNextW
TranslateMessage
DrawFrameControl
DispatchMessageW
ReleaseCapture
SetWindowTextA
SetScrollPos
GetClassLongA
CreatePopupMenu
GetSystemMetrics
RemovePropA
EnableMenuItem
CheckMenuItem
DefFrameProcA
OffsetRect
UnregisterClassA
WindowFromPoint
GetMenuItemInfoA
GetWindowTextA
SystemParametersInfoA
EnableWindow
GetKeyState
GetScrollRange
CharLowerBuffA
SetTimer
SetActiveWindow
MapWindowPoints
GetWindowRect
GetWindowLongA
GetCapture
FrameRect
SetForegroundWindow
SetPropA
RegisterWindowMessageA
GetKeyboardLayoutList
ShowScrollBar
MoveWindow
SetScrollInfo
RegisterClassA
SetWindowPlacement
GetForegroundWindow
CharLowerA
TranslateMDISysAccel
ReleaseDC
GetSystemMenu
ShowWindow
CloseClipboard
GetWindowPlacement
GetMenuStringA
TrackPopupMenu
MapVirtualKeyA
PeekMessageW
IsRectEmpty
ShowOwnedPopups
IntersectRect
GetClassNameA
GetFocus
MsgWaitForMultipleObjects
GetScrollInfo
OpenClipboard
GetKeyboardState
RemoveMenu
FindWindowA
CharUpperBuffA
IsZoomed
GetTopWindow
GetWindowThreadProcessId
PostMessageA
SetRect
InsertMenuA
DestroyWindow
GetSysColorBrush
EmptyClipboard
SetWindowLongA
DrawTextA
GetActiveWindow
LoadCursorA
GetClassInfoA
OemToCharA
SetWindowsHookExA
GetKeyboardType
CreateIcon
DestroyIcon
DrawIconEx
GetKeyboardLayout
LoadBitmapA
LoadStringA
IsWindowEnabled
GetCursorPos
IsDialogMessageA
GetWindowLongW
MessageBeep
ScrollWindow
LoadIconA
SetWindowLongW
DefMDIChildProcA
SetFocus
EnumChildWindows
MessageBoxA
DrawAnimatedRects
SetClassLongA
GetDCEx
ole32
GetHGlobalFromStream
CoFreeUnusedLibraries
shell32
Shell_NotifyIconA
DragQueryFileA
SHFileOperationA
SHGetFileInfoA
kernel32
lstrcatA
LocalReAlloc
SetThreadLocale
HeapAlloc
ExitThread
FindFirstFileA
GetProcAddress
VirtualAllocEx
ExitProcess
LoadLibraryA
lstrcpyA
WaitForSingleObject
SetHandleCount
GetModuleHandleA
GetACP
MulDiv
GlobalAlloc
DeleteFileA
lstrcpynA
version
GetFileVersionInfoSizeA
Sections
CODE Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 139KB - Virtual size: 238KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ