Static task
static1
Behavioral task
behavioral1
Sample
7de59ef67b91b258afec90e5a1e08533.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7de59ef67b91b258afec90e5a1e08533.exe
Resource
win10v2004-20231222-en
General
-
Target
7de59ef67b91b258afec90e5a1e08533
-
Size
787KB
-
MD5
7de59ef67b91b258afec90e5a1e08533
-
SHA1
eae4dc58dafc4f73eb87c3f1c9c31e0a08b220c1
-
SHA256
3fcd96ffddd5f34e78c04bd97558c9f84e67795d95d0666aea837e5d0e3661eb
-
SHA512
f70f345848411f11024f61b13bcf6f4274ff425b7bcfb5343a645aa64a07a6dfe64ab1d5a0da100f76a355a63fd5130589f7f50ca00504b56839f718789996a6
-
SSDEEP
12288:wiaOChVQVx8Q/ml0pmHHEKCbQGi6I86h7/cR0rU3eW0S3qQsxM3CIJpHmNU7bj19:+IVxuysHHWQ5LhzcReV15wCIHHmNUrvj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7de59ef67b91b258afec90e5a1e08533
Files
-
7de59ef67b91b258afec90e5a1e08533.exe windows:4 windows x86 arch:x86
3233b62c4cf12a5d42025a9e6627725a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
Sleep
LocalFree
lstrlen
SetLastError
CloseHandle
HeapCreate
TlsGetValue
GetConsoleMode
ReleaseMutex
FindResourceA
GetStdHandle
LoadLibraryExW
SetEnvironmentVariableA
GetModuleHandleA
GetCurrentThreadId
PulseEvent
CreateMutexA
TerminateThread
GlobalUnlock
user32
DefWindowProcW
GetDlgItem
DispatchMessageA
SetFocus
CopyRect
FillRect
CheckRadioButton
IsWindow
GetIconInfo
CallWindowProcA
DrawEdge
GetDC
DrawMenuBar
uxtheme
GetThemeBool
GetCurrentThemeName
DrawThemeIcon
GetThemeColor
CloseThemeData
dpnet
DirectPlay8Create
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 778KB - Virtual size: 778KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ