Static task
static1
Behavioral task
behavioral1
Sample
7ee576da56f96d3d7cfcbab4d6e4cc41.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7ee576da56f96d3d7cfcbab4d6e4cc41.exe
Resource
win10v2004-20231222-en
General
-
Target
7ee576da56f96d3d7cfcbab4d6e4cc41
-
Size
274KB
-
MD5
7ee576da56f96d3d7cfcbab4d6e4cc41
-
SHA1
d0ae0785e2d97d9b4b87435e6d67e6d76e89fd91
-
SHA256
4cdb252682ee0891e4aff2fe3ebd9908791c5fcad2a81d16a0712483d11022cd
-
SHA512
d725fff95516354eb2d9bcec38c78e73abfdc4b7061f77fb86db4e9fff690e30b3fd8d4e57be5d28828947ad9e2a4cae5df1a147b891a5c8273c52385da6fdd9
-
SSDEEP
6144:q9CFjUjhN4zqHmkiy4uRQpvCItwVwSGSwRYBKqk4snS:q9ChUjh2HyxRX+wV+aBr6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ee576da56f96d3d7cfcbab4d6e4cc41
Files
-
7ee576da56f96d3d7cfcbab4d6e4cc41.exe windows:4 windows x86 arch:x86
82b1d676c5b0c535485efffbcec598ed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetCommandLineA
GetFileType
GetStringTypeW
InterlockedIncrement
GetTickCount
FormatMessageA
HeapAlloc
QueryPerformanceCounter
CreateFileW
GetCurrentProcessId
EnterCriticalSection
GetLastError
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 229KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ