Static task
static1
Behavioral task
behavioral1
Sample
7d90a09b05af9e7477fba3bf8b4c7625.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7d90a09b05af9e7477fba3bf8b4c7625.exe
Resource
win10v2004-20231222-en
General
-
Target
7d90a09b05af9e7477fba3bf8b4c7625
-
Size
56KB
-
MD5
7d90a09b05af9e7477fba3bf8b4c7625
-
SHA1
f51098a92986ba36040a71f65c2d5c7afbfac98e
-
SHA256
28e164de861d5fa6f9ba0399669494a8ad571f46fa1424d6ec378e59e57e0de1
-
SHA512
5cc8c9ae8c15281aa3873ad7d43034e7946b31b6456b33c9509aa1bbeb9e95c90c1ab39843ff6aeabea1b55d34dc78413b975aeabab3fe76035decafca6bee43
-
SSDEEP
1536:mH/LDzTNWM07ZWdkzlojHAb8NJDqKu2pDNtkwDDHzGfA:ULDNWPIpjBqK3PDDS4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d90a09b05af9e7477fba3bf8b4c7625
Files
-
7d90a09b05af9e7477fba3bf8b4c7625.exe windows:4 windows x86 arch:x86
248d88c36eca0c497a6e055a3eccd8d8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileW
ExitProcess
GetDiskFreeSpaceA
GetFileInformationByHandle
GetThreadSelectorEntry
LockFile
OpenProcess
OpenSemaphoreA
QueryPerformanceCounter
SetFilePointer
SetMessageWaitingIndicator
WriteConsoleOutputA
advapi32
BuildImpersonateExplicitAccessWithNameW
ChangeServiceConfigW
CryptDestroyKey
CryptGetDefaultProviderW
GetServiceKeyNameA
ObjectOpenAuditAlarmW
PrivilegedServiceAuditAlarmA
user32
AdjustWindowRectEx
AlignRects
AnimateWindow
CreateCursor
EnumDisplaySettingsExA
GetComboBoxInfo
GetDoubleClickTime
GetSysColorBrush
IsMenu
MessageBoxW
ModifyMenuW
ShowWindowAsync
wvsprintfA
gdi32
CloseEnhMetaFile
CreateColorSpaceA
ExtTextOutW
GetArcDirection
GetEnhMetaFileDescriptionW
GetFontLanguageInfo
GetLogColorSpaceW
GetPolyFillMode
GetStretchBltMode
GetTextCharset
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointA
SetFontEnumeration
UpdateColors
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE