Static task
static1
Behavioral task
behavioral1
Sample
7ef47362320a66786f64e74edfca3306.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7ef47362320a66786f64e74edfca3306.exe
Resource
win10v2004-20231215-en
General
-
Target
7ef47362320a66786f64e74edfca3306
-
Size
637KB
-
MD5
7ef47362320a66786f64e74edfca3306
-
SHA1
22ece163b94997c75a681a6872526a0bf857025f
-
SHA256
1f777161cfceacc1fa779a4f9c13d94d89bf92ca0b52f8c75b19ab0e7f03f31f
-
SHA512
ecfcf5c66eada07150c156bb2dc6ff727845fd0db0b8e816561c83685a36a2eeb888c93fb93391f9662de1c995beb37f74cd2ed62e067cf1daead711e4c09da5
-
SSDEEP
12288:1EWMadSLnNiPUJLHb5h+jqfi8ayQu2NjE8UIZd/AOz7pqN5I0kHUQSA:aXLnEMJjqWq8MNgBIrhc5GZSA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ef47362320a66786f64e74edfca3306
Files
-
7ef47362320a66786f64e74edfca3306.exe windows:4 windows x86 arch:x86
97c01b2b226a324df28c171077b84200
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnlock
GetAtomNameA
HeapReAlloc
VirtualProtect
GetACP
GetVersion
lstrlenA
TlsGetValue
HeapWalk
GetStdHandle
WaitForSingleObject
GetTickCount
FindAtomA
CloseHandle
GetProfileIntA
TlsFree
InterlockedExchange
GetModuleHandleA
GetConsoleCP
LoadLibraryA
CompareFileTime
user32
GetKeyboardLayout
UpdateWindow
LoadIconA
ShowWindow
GetScrollRange
PaintDesktop
GetWindowTextA
TranslateMessage
InflateRect
GetMenu
GetDlgItem
DispatchMessageA
SubtractRect
DialogBoxParamA
CreateCaret
CopyRect
SetWindowPos
SetPropA
EnableScrollBar
EqualRect
DestroyMenu
ModifyMenuA
InsertMenuA
PostQuitMessage
PostMessageA
MessageBoxA
GetMenuStringA
msi
MsiEnumClientsA
MsiCloseHandle
MsiGetMode
MsiDoActionA
MsiEnumProductsA
ws2_32
WSAAccept
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ