Static task
static1
Behavioral task
behavioral1
Sample
7e6a35fe82b3d4e45166fa421bee379b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7e6a35fe82b3d4e45166fa421bee379b.exe
Resource
win10v2004-20231215-en
General
-
Target
7e6a35fe82b3d4e45166fa421bee379b
-
Size
572KB
-
MD5
7e6a35fe82b3d4e45166fa421bee379b
-
SHA1
bac073b91604044de253caab17e764dc5dd2ed90
-
SHA256
6c0f4704d836ec9d3e3d07c7c93c490baf8a2b4188e5413fbdab1d295a8f87d2
-
SHA512
28bfb6b9d3c482c49261152190ff4bf2b7eecbb17416e4590bdd712b5ddff04fed6864ec471f705bfd589d514e875d8e019d09e4a38b616ee223dbd1bf267457
-
SSDEEP
12288:H+lCQem1St6nmDg/r8dU78KynXwdDiUIx7uBv:H+lCQFJny8AdU78Pn6vB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e6a35fe82b3d4e45166fa421bee379b
Files
-
7e6a35fe82b3d4e45166fa421bee379b.exe windows:4 windows x86 arch:x86
6739428263530ed79e9c4d15affbcd5d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SheSetCurDrive
ExtractIconEx
SHGetDesktopFolder
FreeIconList
kernel32
GetACP
TlsAlloc
SetConsoleCursorInfo
HeapCreate
FindAtomW
HeapFree
GetLongPathNameW
GetLocalTime
SetLastError
ExpandEnvironmentStringsW
GlobalFree
GetProcAddress
GetVersionExW
GetDateFormatA
WriteConsoleW
GetCurrencyFormatA
HeapSize
EnumSystemLocalesA
lstrcmpi
CloseHandle
GetUserDefaultLCID
GetTimeZoneInformation
ContinueDebugEvent
VirtualFree
TlsGetValue
SetConsoleScreenBufferSize
FillConsoleOutputCharacterW
GlobalFindAtomA
LeaveCriticalSection
ExitThread
LoadLibraryExW
GetConsoleMode
FlushFileBuffers
ExitProcess
GetExitCodeProcess
FreeEnvironmentStringsA
OpenFileMappingW
IsValidCodePage
GetCurrentProcessId
ReadConsoleOutputAttribute
IsValidLocale
SetEnvironmentVariableA
CreateMutexA
GetPrivateProfileStructA
TerminateProcess
RtlUnwind
SetHandleCount
CreateFileMappingW
TlsFree
GetStringTypeA
InterlockedExchange
SetFilePointer
OpenWaitableTimerW
GetCompressedFileSizeW
IsDebuggerPresent
GetProfileSectionW
WriteFile
GetLocaleInfoA
TlsSetValue
GetEnvironmentStringsW
GetThreadSelectorEntry
IsBadReadPtr
GetCurrentProcess
GetAtomNameW
FormatMessageW
HeapAlloc
lstrlenA
InitializeCriticalSection
IsBadWritePtr
HeapDestroy
lstrcpyn
LoadLibraryA
FindFirstFileExA
GetCurrentThreadId
GetStringTypeW
HeapReAlloc
DeleteCriticalSection
GetSystemInfo
WaitForMultipleObjectsEx
CompareStringA
GetModuleFileNameA
FreeEnvironmentStringsW
OpenEventA
GetCurrentThread
GetProfileStringW
OpenMutexA
SetLocaleInfoW
MultiByteToWideChar
GetLocaleInfoW
GetFileType
ReadFile
GetCPInfo
GetVersionExA
GlobalUnfix
GetSystemTimeAsFileTime
VirtualAlloc
FoldStringA
WideCharToMultiByte
VirtualQueryEx
LCMapStringA
SetStdHandle
GetTickCount
GetStdHandle
GetEnvironmentStrings
VirtualQuery
LCMapStringW
GetThreadLocale
lstrcatW
GetOEMCP
GetTimeFormatA
GetModuleHandleA
GetStartupInfoA
FileTimeToSystemTime
GetCommandLineA
UnhandledExceptionFilter
VirtualProtect
CompareStringW
PulseEvent
EnterCriticalSection
SetComputerNameA
GlobalSize
GetLastError
GlobalGetAtomNameA
QueryPerformanceCounter
user32
SetUserObjectSecurity
BroadcastSystemMessage
FindWindowW
RegisterClassExA
EndPaint
UnregisterClassW
LoadMenuA
DdeConnect
InvalidateRect
OemToCharBuffW
WINNLSGetEnableStatus
MessageBoxA
SetMenuItemInfoA
BroadcastSystemMessageW
CreateIconIndirect
UnhookWinEvent
OpenInputDesktop
SetWindowWord
InSendMessage
GetCursorPos
GetUserObjectSecurity
InsertMenuA
GetMenuDefaultItem
SendDlgItemMessageA
SetWinEventHook
DefWindowProcA
GetForegroundWindow
DdeKeepStringHandle
DestroyWindow
GetSystemMetrics
LoadImageW
ShowWindow
RegisterClassA
SetWindowPos
SetCapture
DdeSetUserHandle
EnumPropsExW
CreateWindowExA
DdeUninitialize
comctl32
CreateToolbar
ImageList_LoadImage
ImageList_SetFlags
InitCommonControlsEx
ImageList_GetFlags
ImageList_GetBkColor
CreatePropertySheetPageW
ImageList_SetBkColor
ImageList_Remove
Sections
.text Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 249KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ