Static task
static1
Behavioral task
behavioral1
Sample
7cf3655eb503f3792a808839d0e1d975.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7cf3655eb503f3792a808839d0e1d975.exe
Resource
win10v2004-20231222-en
General
-
Target
7cf3655eb503f3792a808839d0e1d975
-
Size
56KB
-
MD5
7cf3655eb503f3792a808839d0e1d975
-
SHA1
20e54e2f6a425c8ba6dc20e3973213776b13febe
-
SHA256
4b56fa87d34225e44b825af88cf63a3a48dd5f93532198b18a308590973f0d2e
-
SHA512
889c7aa78bf80e8dece3481ead98a9a808e1f79c1c339bab62e4c3be7c6a3327bb13f4af949cec90340f98357ff76d37afedd8c67b55bdb29da8a0bd37331c48
-
SSDEEP
1536:mPMaB+7ppcq/QdnKVK68w4MIRKIFDFPCKpso7dxX:mEaB+1PoKV+w4MvcLzH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7cf3655eb503f3792a808839d0e1d975
Files
-
7cf3655eb503f3792a808839d0e1d975.exe windows:4 windows x86 arch:x86
4c71388e384fa8d26ecec1f0da9a7e67
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToCacheFileA
ReleaseBindInfo
CompareSecurityIds
DllRegisterServerEx
ntdll
LdrShutdownThread
ZwSetInformationProcess
KiUserCallbackDispatcher
LdrLockLoaderLock
Sections
.text Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE