Static task
static1
Behavioral task
behavioral1
Sample
7d4bac76421c28379fc5934a5fefdafd.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7d4bac76421c28379fc5934a5fefdafd.exe
Resource
win10v2004-20231215-en
General
-
Target
7d4bac76421c28379fc5934a5fefdafd
-
Size
316KB
-
MD5
7d4bac76421c28379fc5934a5fefdafd
-
SHA1
79e2bc0db924822a87f72d33487074dc442ddb60
-
SHA256
6698c8e0e1cea27997885e50f23981cdc89a9c5e7470cb343b203ff2aa7144ed
-
SHA512
20b8fddeea0600c370c1bb7bb2da1ec58bdc09eb2c0dbf96e8055971307c656673d3106212de47a1c67d8b72350682e1191fe61fba7b848bbbd076a7da42a67d
-
SSDEEP
6144:qgAoavv3J8TfvDCcNMfATrlJFAigIOmxvnIhV3Ul1OEvFBNji0nciVNy3PqhO0tQ:Ioavv5MnzNZJF6WvnW3EEyFBNj9dVNyv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d4bac76421c28379fc5934a5fefdafd
Files
-
7d4bac76421c28379fc5934a5fefdafd.exe windows:4 windows x86 arch:x86
45b54182025b5ecde20c7ec047eb9e77
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetTimer
SendMessageA
PostQuitMessage
MessageBoxA
KillTimer
GetDlgItem
EndDialog
DialogBoxIndirectParamA
kernel32
SizeofResource
GetVersion
lstrlenA
lstrcpyA
lstrcatA
WriteFile
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeResource
GetModuleHandleA
GetProcAddress
GetTickCount
MultiByteToWideChar
GlobalAlloc
GlobalFree
LoadLibraryA
LoadResource
LockResource
Sleep
comctl32
InitCommonControls
GetMUILanguage
shlwapi
StrStrA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 297KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE