Static task
static1
Behavioral task
behavioral1
Sample
7cbd35e8e2d0d74005384b2fe9636541.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7cbd35e8e2d0d74005384b2fe9636541.exe
Resource
win10v2004-20231215-en
General
-
Target
7cbd35e8e2d0d74005384b2fe9636541
-
Size
192KB
-
MD5
7cbd35e8e2d0d74005384b2fe9636541
-
SHA1
a27f77869daad8697ba4de9c85d05e6874fed167
-
SHA256
cd371133a2d7f99d157c193d9ee0be8cbb923f84decda391e6a1d53896e44734
-
SHA512
3424b00dbeb9132b1f815019aef6f5586c98958344f85dd67c10e04f1e5316afeb17a4e6dbe4f5cbfce98ef8e7907597808985b23adb3d41fca8f8a91773a5de
-
SSDEEP
3072:utw5AF4nP2M8djlaq23aNnko7D7K/NhTh1kGKAXtgqG+nltLMkiQVPzpqA7ZjDv:u65PuM8djlP6wnkimVh7XKAXRltQkiQp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7cbd35e8e2d0d74005384b2fe9636541
Files
-
7cbd35e8e2d0d74005384b2fe9636541.exe windows:4 windows x86 arch:x86
dba062ded4b7d9921eb7186049857132
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetTickCount
LoadLibraryExA
GetConsoleCP
GetAtomNameA
GlobalUnlock
HeapCreate
WaitForMultipleObjects
GetModuleHandleA
VirtualProtect
lstrlenA
GetVersion
WaitForSingleObject
CloseHandle
GetSystemDefaultLangID
SetConsoleCP
HeapReAlloc
SuspendThread
CompareFileTime
InterlockedExchange
GetStdHandle
user32
DispatchMessageA
CreateIcon
DialogBoxParamA
SetPropA
CopyImage
DestroyMenu
InvertRect
GetKeyboardLayout
SetWindowPos
InsertMenuA
DragObject
IsDialogMessage
GetCursorInfo
EnableScrollBar
CreateMenu
FindWindowA
FillRect
GetDlgItem
DrawCaption
GetKeyState
SetScrollInfo
advapi32
RegEnumKeyA
RegCloseKey
RegEnumValueA
RegQueryInfoKeyA
RegCreateKeyExA
apphelp
ApphelpCheckExe
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ