Static task
static1
Behavioral task
behavioral1
Sample
7d80d04e5877245b14ef635336c50bc3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7d80d04e5877245b14ef635336c50bc3.exe
Resource
win10v2004-20231215-en
General
-
Target
7d80d04e5877245b14ef635336c50bc3
-
Size
1.0MB
-
MD5
7d80d04e5877245b14ef635336c50bc3
-
SHA1
49aaceaac9877ac7c29a8129a44b804d33faf7fb
-
SHA256
3f8fa41cc73f0d779595e5bda0e324e9a3b0ba708d696bdc25b54f4802374197
-
SHA512
0550a8502ec169604e20442032612efd15a89629a6ffee1103ac7cf8df4eca35a32abb7c9bb27235d4ccaf870439b2c16cf01efa8e0f19b5af5789c4d75d9164
-
SSDEEP
12288:NxmPHpN23gzmol8T8++3joMhAXacAjxjxjSBXA5Wz6cw/kuEgMTKmgGmnpY:N+GGm+r+moQKA5lc1uEgGKmgGmnpY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d80d04e5877245b14ef635336c50bc3
Files
-
7d80d04e5877245b14ef635336c50bc3.exe windows:4 windows x86 arch:x86
23be8e454953df6c20f6e77ba5d5b3c8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GlobalMemoryStatus
SystemTimeToFileTime
QueryPerformanceFrequency
QueryPerformanceCounter
MulDiv
LocalFree
FormatMessageA
GetTimeFormatA
GetDateFormatA
GetCurrentDirectoryA
SetEndOfFile
CreateFileA
FileTimeToSystemTime
GetFileTime
GetFileSize
GetFileAttributesA
GetFullPathNameA
GetSystemTimeAsFileTime
GetSystemTime
GetLocalTime
GetCurrentProcessId
DeleteFileA
ReadFile
FindClose
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
SetCurrentDirectoryA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetSystemInfo
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
RtlUnwind
WriteFile
IsBadWritePtr
IsBadReadPtr
HeapValidate
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
RaiseException
FindNextFileA
RemoveDirectoryA
CreateDirectoryA
GlobalFree
SetEnvironmentVariableA
CompareStringW
CompareStringA
CloseHandle
GetLocaleInfoW
GetTimeZoneInformation
FlushFileBuffers
SetStdHandle
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
SetFilePointer
Sleep
SetConsoleCtrlHandler
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
InterlockedIncrement
OutputDebugStringA
InterlockedDecrement
DebugBreak
LoadLibraryA
ExpandEnvironmentStringsA
GetComputerNameA
GlobalAlloc
FindResourceA
LoadResource
GetProcAddress
HeapReAlloc
MoveFileA
GetDiskFreeSpaceA
SetErrorMode
CopyFileA
GlobalSize
GlobalLock
GlobalUnlock
GetModuleHandleA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
user32
SetWindowTextA
EndDialog
IsDlgButtonChecked
SendMessageA
DialogBoxParamA
GetMessageA
SetScrollInfo
SetFocus
GetDlgItemTextA
wsprintfA
ShowWindow
CheckDlgButton
GetDlgItem
SetDlgItemTextA
RegisterClassExA
DispatchMessageA
FrameRect
GetSystemMenu
EnableMenuItem
IsDialogMessageA
GetDesktopWindow
MessageBeep
GetWindow
SetForegroundWindow
GetTopWindow
AdjustWindowRect
HideCaret
SetCaretPos
ShowCaret
DestroyCaret
CreateCaret
GetActiveWindow
CloseClipboard
GetClipboardData
OpenClipboard
GetDoubleClickTime
GetSystemMetrics
GetMessageTime
GetWindowTextA
GetKeyState
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
IsIconic
SetActiveWindow
SetWindowLongA
IsWindow
RedrawWindow
InvalidateRect
GetSysColor
CreateWindowExA
GetSubMenu
LoadMenuA
LoadIconA
FillRect
GetAsyncKeyState
ScreenToClient
GetCursorPos
ScrollDC
SetScrollPos
GetSysColorBrush
TrackPopupMenu
SetCapture
SetClipboardData
EmptyClipboard
GetForegroundWindow
SetTimer
KillTimer
ReleaseCapture
GetGuiResources
EnableWindow
CreateDialogParamA
DestroyWindow
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
wvsprintfA
MessageBoxA
LoadStringA
GetClassNameA
GetWindowLongA
FindWindowA
SystemParametersInfoA
GetDC
ReleaseDC
GetParent
GetWindowRect
SetWindowPos
RegisterWindowMessageA
PeekMessageA
BeginPaint
GetClientRect
DrawEdge
EndPaint
DefWindowProcA
LoadCursorA
TranslateMessage
gdi32
FloodFill
Polyline
SetROP2
Pie
Arc
SetPaletteEntries
GetNearestPaletteIndex
ResizePalette
GetTextExtentPointA
EnumFontFamiliesExA
GetTextFaceA
CreateBitmap
GetPixel
SetPixel
SetDIBits
GetPaletteEntries
StretchBlt
CreateDIBitmap
Ellipse
OffsetClipRgn
IntersectClipRect
CreateRectRgn
GetClipRgn
CreatePalette
SetTextColor
SetBkColor
ExtTextOutW
ExtTextOutA
SetViewportOrgEx
Rectangle
CreateEllipticRgn
CreateRectRgnIndirect
CombineRgn
CreateSolidBrush
UpdateColors
GetNearestColor
SelectClipRgn
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
Polygon
FrameRgn
CreatePen
GetTextMetricsA
SetTextAlign
TextOutA
GetObjectA
SelectPalette
RealizePalette
GetDIBits
SelectObject
GetTextExtentPoint32A
GetStockObject
SetBkMode
StretchDIBits
MoveToEx
LineTo
DeleteDC
SetAbortProc
StartDocA
StartPage
EndPage
EndDoc
DeleteObject
GetDeviceCaps
CreateFontIndirectA
SetMapMode
comdlg32
GetSaveFileNameA
PrintDlgA
GetOpenFileNameA
CommDlgExtendedError
advapi32
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
GetUserNameA
winmm
timeGetTime
mciSendCommandA
waveOutWrite
waveOutPrepareHeader
waveOutOpen
waveOutReset
joyGetDevCapsA
joyGetPos
joyGetNumDevs
joyGetPosEx
midiOutOpen
midiOutShortMsg
mciGetErrorStringA
waveOutClose
midiOutClose
midiOutReset
waveOutUnprepareHeader
shell32
ShellExecuteA
Sections
.text Size: 784KB - Virtual size: 783KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 776KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ