Static task
static1
Behavioral task
behavioral1
Sample
7dd35d9efc552f17d44e0cd4d50b84ca.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7dd35d9efc552f17d44e0cd4d50b84ca.exe
Resource
win10v2004-20231222-en
General
-
Target
7dd35d9efc552f17d44e0cd4d50b84ca
-
Size
80KB
-
MD5
7dd35d9efc552f17d44e0cd4d50b84ca
-
SHA1
a6f5d0638df7d310f09f107b53360cc60e0eead7
-
SHA256
44effa9fa1c70dd42ae30492b8a006c3ab9b2c07c5cea184545debb228682bde
-
SHA512
bc50518e11bad8f2eac861ccacbe2af2c33bbf5ba3851b79f8f9f5bf51881b6cb7fce0b8f824e4ff6db995cc38467246105eca8ae06a8d0c20a9fd5a9279d82e
-
SSDEEP
1536:l7/c3G2761plaoYOHGFCpFhvMj6eNwHWBlZL4F6:ljg4laoYZF8FRM5Nh4U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7dd35d9efc552f17d44e0cd4d50b84ca
Files
-
7dd35d9efc552f17d44e0cd4d50b84ca.exe windows:4 windows x86 arch:x86
701a7de39a669b4d971f167b66bc4619
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VerLanguageNameA
GlobalAlloc
SetFileAttributesA
CloseHandle
lstrcatA
GetFileSizeEx
GetFileSize
OutputDebugStringA
lstrcmpA
GetUserDefaultLangID
CompareStringA
GetProcAddress
LoadLibraryA
RaiseException
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetThreadLocale
GetCPInfo
SetFilePointer
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetLastError
GetFileAttributesA
TerminateProcess
GetCurrentProcess
GetFileType
GetCurrentProcessId
HeapAlloc
HeapFree
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
SetStdHandle
FlushFileBuffers
user32
LoadCursorFromFileA
IsWindow
FlashWindowEx
wsprintfA
SetRect
MessageBoxA
CreateWindowExA
CloseWindow
LoadCursorA
RegisterHotKey
gdi32
CreateRectRgn
CreateHatchBrush
CreateCompatibleDC
comdlg32
GetOpenFileNameA
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ