Static task
static1
Behavioral task
behavioral1
Sample
7d0a7cbdf70ea6c5eea17f7378e7c7aa.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7d0a7cbdf70ea6c5eea17f7378e7c7aa.exe
Resource
win10v2004-20231222-en
General
-
Target
7d0a7cbdf70ea6c5eea17f7378e7c7aa
-
Size
48KB
-
MD5
7d0a7cbdf70ea6c5eea17f7378e7c7aa
-
SHA1
600c64847f0ae9e9dd7b239a7a9da49e4f1e4bd9
-
SHA256
33e2d6fba6b2108cb27516487c277184e790f48cdbc8e44a6689dee863fba53d
-
SHA512
cfa3f615785014e85c607371f019b7247e4d1b60fba8ade9f40be38fd409ab69aac13184b1300ef0ef42f51b788ad106f0a018534f90897f86835db6c86b27d7
-
SSDEEP
1536:Z+afZjDqxEVPUMMr/qefezoH8+lleQsNNHswN2lL2Z:Z+MDkKUpr/qcwoc+llzSswuqZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d0a7cbdf70ea6c5eea17f7378e7c7aa
Files
-
7d0a7cbdf70ea6c5eea17f7378e7c7aa.exe windows:4 windows x86 arch:x86
92b47bd8ce995e49d29d8ea2f8770412
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueW
RegOpenKeyExW
RegQueryValueExA
RegSetValueW
RegOpenKeyA
RegEnumKeyExW
RegQueryValueA
RegEnumValueW
RegEnumKeyExA
RegDeleteValueA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 42KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ