Static task
static1
Behavioral task
behavioral1
Sample
7ce0cc78a7a2a8c5ae5de2ecfb6eb83c.exe
Resource
win7-20231215-en
General
-
Target
7ce0cc78a7a2a8c5ae5de2ecfb6eb83c
-
Size
77KB
-
MD5
7ce0cc78a7a2a8c5ae5de2ecfb6eb83c
-
SHA1
4b7e837b1fc042e97bc4e438e9f0256ae62326b0
-
SHA256
cb69a785edb9bd7d7671d4baff6e3470bccb92d065135dd0fbb3cd58493de69b
-
SHA512
ff43daa8854247d94ebef8af0dcd7e48e89d80f809773aedafb4d1eb8bec6db2b47d6462fa31ab885ec62d7ca8958961b853d73f5bb6708b7d76a8387cdbec26
-
SSDEEP
1536:vbXZp8FRrXRJd2Bn6BRsjankCC7Nf6lpsBUOI0HdGTbMbARFtPcvXJf28EF3+YB:Tpp8FRrvcn6BRIankff6TsBY0HKmA3tp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ce0cc78a7a2a8c5ae5de2ecfb6eb83c
Files
-
7ce0cc78a7a2a8c5ae5de2ecfb6eb83c.exe windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
i9g42zs. Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ugdrr3px Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
74mlw00v Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ