Static task
static1
Behavioral task
behavioral1
Sample
7ddf69c05dc2c4faa2bf1944c75d1209.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7ddf69c05dc2c4faa2bf1944c75d1209.exe
Resource
win10v2004-20231222-en
General
-
Target
7ddf69c05dc2c4faa2bf1944c75d1209
-
Size
42KB
-
MD5
7ddf69c05dc2c4faa2bf1944c75d1209
-
SHA1
ffe3d0b9f51b74970a68cdff281de985d148b854
-
SHA256
f4d1d3ae5b7fdeba8fd04a78874ddd845e16a16a38c9aaafd136392f990579c6
-
SHA512
5198dc70d35e5de011392f29301884625553e1edd941267d490301037637f4c90d52773f25d342ad0e8e3d27f1cd61e5504e4ae04372f4afc976d6af9ea120e1
-
SSDEEP
768:V5OzoSmiDInAjBHt7AANehvoeypZ3VmbpBM1Gto9BBqRd85O9:NSmrnAlN7TehNyPGp+qofwSQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ddf69c05dc2c4faa2bf1944c75d1209
Files
-
7ddf69c05dc2c4faa2bf1944c75d1209.exe windows:5 windows x86 arch:x86
71abf9531e2f71f4d7d1f52c5a0e72c9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumValueW
kernel32
CloseHandle
DeleteFileW
HeapAlloc
HeapFree
Sections
.hih Size: 35KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ufcxgh Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tmtoz Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ