Static task
static1
Behavioral task
behavioral1
Sample
7f3e31ff9f54168ec9149a73b83e8859.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7f3e31ff9f54168ec9149a73b83e8859.exe
Resource
win10v2004-20231222-en
General
-
Target
7f3e31ff9f54168ec9149a73b83e8859
-
Size
19KB
-
MD5
7f3e31ff9f54168ec9149a73b83e8859
-
SHA1
0051622edb536dd68f6a59f41c4b457df6d4833a
-
SHA256
0dbb6492f18bbaaa7b44a7ff54f8c4417da8243cde801ff907c652fe7948f258
-
SHA512
ccc8f201f1c0246ee9c4166914691654c387fc0f931328ce175d8b2444c049bc9a85e9335b4fc915fc4303691fe9091a335b5e58030781a35d5a233c02d52269
-
SSDEEP
384:/YfmQqlQ96X/DtUa7ZZdcolc1YCA4KGf/KR:04/DSO51pjmm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f3e31ff9f54168ec9149a73b83e8859
Files
-
7f3e31ff9f54168ec9149a73b83e8859.exe windows:4 windows x86 arch:x86
5b2c0806aafe12b12e13ef8bed7107f8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
CloseHandle
GetStdHandle
VirtualProtect
HeapReAlloc
CompareFileTime
GetModuleHandleA
AddAtomA
WaitForMultipleObjects
LoadLibraryExA
GetSystemDefaultLangID
GetTickCount
GetConsoleCP
GetVersion
WaitForSingleObject
InterlockedExchange
GetCommandLineA
TlsFree
GlobalUnlock
HeapCreate
GetProfileIntA
user32
ModifyMenuA
SetWindowPos
GetKeyState
CopyRect
GetWindowTextA
MessageBoxA
FindWindowA
DestroyMenu
EqualRect
EnableScrollBar
PostMessageA
DialogBoxParamA
GetDlgItem
GetMenuStringA
GetKeyboardLayout
TranslateMessage
PaintDesktop
SetPropA
DispatchMessageA
SubtractRect
CreateCursor
UpdateWindow
ShowWindow
InsertMenuA
CreateCaret
atl
AtlModuleInit
AtlAdvise
AtlUnadvise
AtlGetVersion
AtlSetErrorInfo
dnsapi
DnsStatusString
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ