Static task
static1
Behavioral task
behavioral1
Sample
7e834426c346600bc393e61e8534a84c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7e834426c346600bc393e61e8534a84c.exe
Resource
win10v2004-20231215-en
General
-
Target
7e834426c346600bc393e61e8534a84c
-
Size
324KB
-
MD5
7e834426c346600bc393e61e8534a84c
-
SHA1
e89b443c408f473ea02ddbddb0d41f49cb32e895
-
SHA256
ac7c505689bb466317b5b6eeadf91bbd489a7fb471c691184806341e2e9bbba0
-
SHA512
556e8c652643ff5d03146bb3552b1dcca12dec80dab0fb7c5cb81522b4bd4ce30d6bec5f8fab758522081db7568c5cb2496fb1509582fcc0fcf77896f769b690
-
SSDEEP
6144:z6BtrUtEMMI/A1UDHznQbor04XzI5brJ4H9rUSMvh1PQ3jgL:GBe2FI/XTz84Xs5brJEwhh1Yy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e834426c346600bc393e61e8534a84c
Files
-
7e834426c346600bc393e61e8534a84c.exe windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
v21t.u5m Size: - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
qonpm4xh Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
q4x2k212 Size: - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
o7hzebip Size: 291KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3bnj0g0f Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ