Static task
static1
Behavioral task
behavioral1
Sample
7ead0bce482d2fce00dc3c7defdfbba6.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7ead0bce482d2fce00dc3c7defdfbba6.exe
Resource
win10v2004-20231215-en
General
-
Target
7ead0bce482d2fce00dc3c7defdfbba6
-
Size
2.6MB
-
MD5
7ead0bce482d2fce00dc3c7defdfbba6
-
SHA1
0fee3b6b18ded7e065e325a8af53ca832082fd00
-
SHA256
6eb563fed2270ffe5f8558d031c8b2cc4268426654e473c358cf5f4ff1112f12
-
SHA512
40064b5ab33759b4e90c323dc1196a82ccb7c80a7aee14e622c0e7a44a095e6e8e63e4a56906a499360fff0789fad093bc93fb3c9a54b5cd8ebb6c6159f7576c
-
SSDEEP
49152:KUuLcARyD2EiSew6RnXdHzFFsfVjfohF5Vedj9M04rzt1BkFhNk:9uLcAR6dpeVvOf1fohF505gV1Bknq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ead0bce482d2fce00dc3c7defdfbba6
Files
-
7ead0bce482d2fce00dc3c7defdfbba6.exe windows:4 windows x86 arch:x86
f581b23e276229b18b95132be4707788
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDlgItem
KillTimer
SetTimer
MessageBoxW
DialogBoxParamW
DialogBoxParamA
SetWindowLongA
GetWindowLongA
GetWindowTextLengthW
GetWindowTextW
GetWindowTextLengthA
GetWindowTextA
SetWindowTextW
SetWindowTextA
SendMessageW
SendMessageA
LoadStringW
LoadStringA
CharUpperW
CharUpperA
PostMessageA
IsDlgButtonChecked
EndDialog
oleaut32
VariantClear
SysAllocString
SysFreeString
shell32
SHGetPathFromIDListA
SHGetFileInfoA
SHBrowseForFolderA
SHGetMalloc
ole32
CoInitialize
CoUninitialize
msvcrt
__p__commode
_initterm
__getmainargs
__set_app_type
_controlfp
_XcptFilter
_acmdln
exit
__dllonexit
_exit
_onexit
??1type_info@@UAE@XZ
_except_handler3
sprintf
_lrotl
memset
free
strlen
memcpy
memmove
malloc
_CxxThrowException
__CxxFrameHandler
memcmp
_purecall
__setusermatherr
_adjust_fdiv
__p__fmode
kernel32
InitializeCriticalSection
GetCommandLineW
GetVersionExA
Sleep
WaitForMultipleObjects
SetEvent
ResetEvent
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
CreateEventA
GetModuleHandleW
FileTimeToSystemTime
SetEndOfFile
WriteFile
SetFileTime
ReadFile
SetFilePointer
GetFileSize
CreateFileW
CreateFileA
FindFirstFileW
FindFirstFileA
FindClose
RemoveDirectoryW
DeleteFileA
CreateDirectoryW
CreateDirectoryA
GetCurrentDirectoryW
GetCurrentDirectoryA
GetFullPathNameW
GetFullPathNameA
lstrlenA
GetStartupInfoA
FileTimeToLocalFileTime
MoveFileW
SetFileAttributesA
SetFileAttributesW
FormatMessageA
LocalFree
FormatMessageW
GetModuleFileNameA
GetModuleFileNameW
AreFileApisANSI
GetLastError
MultiByteToWideChar
GetModuleHandleA
WideCharToMultiByte
RemoveDirectoryA
MoveFileA
DeleteFileW
CloseHandle
DeleteCriticalSection
WaitForSingleObject
CreateThread
GetProcAddress
VirtualFree
VirtualAlloc
Sections
.text Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ