Static task
static1
Behavioral task
behavioral1
Sample
7f3bf0a327bfb0971aa8378af89a7b1b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7f3bf0a327bfb0971aa8378af89a7b1b.exe
Resource
win10v2004-20231222-en
General
-
Target
7f3bf0a327bfb0971aa8378af89a7b1b
-
Size
58KB
-
MD5
7f3bf0a327bfb0971aa8378af89a7b1b
-
SHA1
698877cba0c6579033738109a59ec9b8be3302fb
-
SHA256
e052054fb9bd21988061b027455f5f214de56fcbf6e180cf73cf0d1632af11d2
-
SHA512
c59689a67d4d08654d51f2b722d7ec109608cc8bfb2fdcfcc9ef212f65e2222b3aeb594b12dffeb05e0d02d7aa0dabe07448a17174e39fff222e294459f3ddea
-
SSDEEP
1536:DJN5tM49Ik/HWKg1A67JfWtrIa0Uy4VtJ:DJrSWps7JfMUa0Uy4VtJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f3bf0a327bfb0971aa8378af89a7b1b
Files
-
7f3bf0a327bfb0971aa8378af89a7b1b.exe windows:5 windows x86 arch:x86
3a100e97fd3a0e7087f41e3f79e7ad63
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSetValueExA
RegCloseKey
RegOpenKeyA
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetKeySecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegEnumKeyA
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
IsValidSid
GetTokenInformation
OpenProcessToken
kernel32
CloseHandle
WriteFile
SetFilePointer
CreateFileA
lstrcatA
lstrcpynA
GetEnvironmentVariableA
lstrcpyA
GetFileAttributesA
MoveFileExA
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
DeleteFileA
SetFileAttributesA
SystemTimeToFileTime
GetSystemTime
CopyFileA
ExpandEnvironmentStringsA
GetLastError
WaitForSingleObject
CreateProcessA
CreateDirectoryA
MoveFileA
lstrlenA
SetEnvironmentVariableA
GetWindowsDirectoryA
GetCurrentDirectoryA
GetCommandLineA
SetLastError
GetCurrentProcess
GetVersionExA
GetStartupInfoA
ExitProcess
GetModuleHandleA
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
Sleep
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
LCMapStringA
MultiByteToWideChar
LCMapStringW
HeapSize
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
RtlUnwind
SetStdHandle
ReadFile
FlushFileBuffers
CompareStringA
GetSystemDefaultLangID
gdi32
TextOutA
user32
ReleaseDC
GetDC
SystemParametersInfoA
LoadKeyboardLayoutA
wsprintfA
ole32
CoCreateInstance
CoUninitialize
CoInitialize
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE