Static task
static1
Behavioral task
behavioral1
Sample
7dc3590c8abdcd5a0d998f7630784d8d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7dc3590c8abdcd5a0d998f7630784d8d.exe
Resource
win10v2004-20231222-en
General
-
Target
7dc3590c8abdcd5a0d998f7630784d8d
-
Size
431KB
-
MD5
7dc3590c8abdcd5a0d998f7630784d8d
-
SHA1
1345f37006941156d00a336683d997a486468e77
-
SHA256
be97aee1bb936fdf4b4bb3250557670b96cbab66142ba5090dc6c4ca7a40273a
-
SHA512
15af6ce572bd9e4093fbfec981bce1d8337ec6d32e972f09592e4a6518f1e057b7813b00d2850d4b887e2936d52477ce267ef9739489db4ce633805d88ace86a
-
SSDEEP
12288:XW7AnMruzbOsi4MCDdZj44dJsQNouskaERSoIu+shyt4QOnmbBF9:GZuvO0FCkxmTt9BF9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7dc3590c8abdcd5a0d998f7630784d8d
Files
-
7dc3590c8abdcd5a0d998f7630784d8d.exe windows:4 windows x86 arch:x86
02b4b82444416610f9942b7e121f9d4c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
TerminateProcess
QueryPerformanceCounter
GetModuleFileNameA
GetProcAddress
VirtualAlloc
HeapReAlloc
LoadLibraryA
GetDiskFreeSpaceW
GetSystemTimeAsFileTime
GetCurrentProcessId
HeapAlloc
GetTickCount
GetCurrentThreadId
GetCurrentProcess
GetModuleHandleA
GetPrivateProfileSectionW
GetVersion
ExitProcess
InterlockedExchange
RtlUnwind
VirtualQuery
shell32
ExtractAssociatedIconExA
InternalExtractIconListA
ShellAboutW
SHGetNewLinkInfo
RealShellExecuteExA
DragQueryFileAorW
SheSetCurDrive
DragFinish
ExtractAssociatedIconA
SHGetSpecialFolderPathA
SHEmptyRecycleBinW
SheChangeDirExW
SHGetSettings
SHGetSpecialFolderLocation
RealShellExecuteA
SheGetDirA
SHLoadInProc
SHGetDataFromIDListA
CommandLineToArgvW
DragQueryFileA
ExtractIconExW
SHGetPathFromIDListW
DoEnvironmentSubstW
SHGetFileInfo
ShellExecuteExW
Sections
.text Size: 153KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 267KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ