Static task
static1
Behavioral task
behavioral1
Sample
7d7f5bcbfb9c61738b02b3d5779af21b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7d7f5bcbfb9c61738b02b3d5779af21b.exe
Resource
win10v2004-20231222-en
General
-
Target
7d7f5bcbfb9c61738b02b3d5779af21b
-
Size
61KB
-
MD5
7d7f5bcbfb9c61738b02b3d5779af21b
-
SHA1
f8213a0646dbe17e2202060f629bf75211115c7b
-
SHA256
e8693ac1c6949c33eb703afb8f7229f0094c8674a782dbf8f0e4bcada4f2be08
-
SHA512
d6ed3b9b7fbe336031785e039dc479c6a66a81ec321508b341f7f86b815605359995902a4194d69d3900c8bbd81fa48b0d4a86ede150f44f87b1a20bda9cc5d1
-
SSDEEP
1536:NIIIk00ZOlEeVROJBunTBkd8B3YxLoUtPd7NSBZC6VIRV65Nxb:bOlE0RWBec8BIZoUtlI26eK5Nxb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d7f5bcbfb9c61738b02b3d5779af21b
Files
-
7d7f5bcbfb9c61738b02b3d5779af21b.exe windows:4 windows x86 arch:x86
b6b2314b530e99480e067d2ef2827688
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleTitleW
GetCurrentThread
HeapDestroy
LCMapStringW
ExitVDM
InterlockedPopEntrySList
WriteConsoleW
GlobalWire
GetExitCodeProcess
ShowConsoleCursor
EndUpdateResourceW
LoadLibraryExW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 47KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE