Static task
static1
Behavioral task
behavioral1
Sample
7cd3425e5f1e6801a8627e98c39e22dd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7cd3425e5f1e6801a8627e98c39e22dd.exe
Resource
win10v2004-20231215-en
General
-
Target
7cd3425e5f1e6801a8627e98c39e22dd
-
Size
412KB
-
MD5
7cd3425e5f1e6801a8627e98c39e22dd
-
SHA1
e586ce4eb994422725ebc07085bfa40447821fd0
-
SHA256
f7921874e8e11f1d6826c48d126feeec3433c91ffd7733e8502ba18004601bfa
-
SHA512
c8e25c60221818b45cf7cd5855e136210bdcb5f5e765c70f6817bb6c466c57b7c6a6747563a1b04913ffa5d727369c3fd11ef9e15616c88798f2d2e1f746bb7b
-
SSDEEP
12288:9aEgzxeFlMeTLmc68oLvUnSam/P+IJdAS/:kzxmlvfmuPSa/IJqE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7cd3425e5f1e6801a8627e98c39e22dd
Files
-
7cd3425e5f1e6801a8627e98c39e22dd.exe windows:4 windows x86 arch:x86
d69ab5d2d80b9be2a728a8ff804889a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Remove
ImageList_GetBkColor
ImageList_DragEnter
CreateStatusWindowA
ImageList_GetFlags
ImageList_AddIcon
DrawStatusText
ImageList_DrawEx
ImageList_GetImageRect
CreateMappedBitmap
InitCommonControlsEx
user32
GrayStringA
GetClassNameA
GetProcessWindowStation
InvertRect
ShowWindow
GetAncestor
wsprintfA
IsWindowVisible
PostQuitMessage
wvsprintfW
SetProcessWindowStation
DdeUnaccessData
UnregisterClassA
RegisterClassExA
AdjustWindowRect
SetWindowLongA
CloseWindowStation
OemToCharBuffA
GetMenuBarInfo
GetQueueStatus
SetCapture
CreatePopupMenu
UnhookWinEvent
DestroyCursor
GetWindowLongW
ReplyMessage
CreateCursor
RegisterClassA
TranslateMessage
DdeFreeStringHandle
GetDlgCtrlID
ScrollWindowEx
OpenIcon
SendDlgItemMessageA
RegisterClassW
GetComboBoxInfo
CreateWindowExW
SetMenu
CreateMDIWindowW
GetWindowWord
MessageBoxA
GetUpdateRgn
RealChildWindowFromPoint
CopyAcceleratorTableA
GetKeyboardLayoutNameA
DlgDirListA
GetDialogBaseUnits
ToUnicodeEx
IsClipboardFormatAvailable
GetKBCodePage
TranslateAccelerator
MessageBoxW
GetTabbedTextExtentA
TileChildWindows
ShowCursor
DefWindowProcW
SetMessageExtraInfo
SetParent
GetMenuItemInfoW
LoadKeyboardLayoutW
GetClassInfoA
PostThreadMessageW
WindowFromDC
SendMessageTimeoutA
EnumPropsExA
IsDlgButtonChecked
DeleteMenu
RegisterClipboardFormatA
RegisterWindowMessageA
InvalidateRect
DestroyWindow
GetKeyNameTextA
kernel32
UnhandledExceptionFilter
IsValidCodePage
SetEvent
SetEnvironmentVariableA
GetTimeFormatA
GetStringTypeW
GetCurrentProcess
GetVersionExA
WriteConsoleOutputAttribute
EnumDateFormatsExW
LCMapStringW
ExitProcess
TlsGetValue
GetModuleFileNameW
SetHandleCount
HeapSize
WideCharToMultiByte
LoadLibraryA
GetSystemTimeAsFileTime
SetFilePointer
GetUserDefaultLCID
LocalSize
GetEnvironmentStrings
OpenMutexA
GetOEMCP
VirtualFree
VirtualProtect
CreateSemaphoreA
GetModuleFileNameA
HeapReAlloc
VirtualQuery
IsBadWritePtr
GetEnvironmentStringsW
LeaveCriticalSection
FreeEnvironmentStringsW
GetCPInfo
QueryPerformanceCounter
GetTickCount
GetSystemInfo
EnumSystemLocalesA
CompareStringW
FreeEnvironmentStringsA
LocalShrink
CreateMutexA
DeleteCriticalSection
InterlockedExchange
FoldStringA
GetLastError
TlsFree
GetModuleHandleA
TlsAlloc
SetLastError
HeapAlloc
InitializeCriticalSection
GetCurrentThreadId
RtlUnwind
GetStartupInfoW
ReadFile
TlsSetValue
CloseHandle
GetLocaleInfoA
GetProcAddress
WriteFile
GetFullPathNameA
HeapFree
FlushFileBuffers
HeapDestroy
MultiByteToWideChar
TerminateProcess
VirtualAlloc
GetDateFormatA
GetStartupInfoA
GetStringTypeA
GetTimeZoneInformation
GetCommandLineW
HeapCreate
GetCurrentProcessId
EnterCriticalSection
GetFileType
GetCurrentThread
GetCommandLineA
GetLocaleInfoW
GetACP
CompareStringA
IsValidLocale
LCMapStringA
GetStdHandle
SetStdHandle
Sections
.text Size: 156KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ