Static task
static1
Behavioral task
behavioral1
Sample
7f9f6ce9fa2ccda5e4ade5440dac5644.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7f9f6ce9fa2ccda5e4ade5440dac5644.exe
Resource
win10v2004-20231215-en
General
-
Target
7f9f6ce9fa2ccda5e4ade5440dac5644
-
Size
68KB
-
MD5
7f9f6ce9fa2ccda5e4ade5440dac5644
-
SHA1
6d66a872faa267c5a5076a85db2293852175af23
-
SHA256
9218d5963a3ded2de8e8d26d83bb69bfc5d40ef9710d0d6c46710b7606efd488
-
SHA512
807b512a2a573b3ff13cfcebafc6b17bae0260c68e3d6dc63b6ad32821588d848462f6fb7a3e9243b996e5a6f97fa071d2c5d7dc06f688a39b16486668583922
-
SSDEEP
1536:1ZvkC+XYdaByOMiVlN7l4vIMnmriwQ7UEW:UOaByLqN54vmXJT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f9f6ce9fa2ccda5e4ade5440dac5644
Files
-
7f9f6ce9fa2ccda5e4ade5440dac5644.exe windows:4 windows x86 arch:x86
ee189c33866248059d9bdfe70bc5e5d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ClearCommError
EndUpdateResourceW
EnumSystemCodePagesA
ExitProcess
GetCurrencyFormatW
GetExitCodeProcess
GetFileAttributesA
GetPrivateProfileSectionNamesW
GetProcessAffinityMask
GetSystemTime
GetThreadPriorityBoost
IsValidCodePage
ScrollConsoleScreenBufferW
SearchPathA
SetFileApisToOEM
SetFilePointer
SetProcessPriorityBoost
SetSystemPowerState
SetTapePosition
SetVolumeLabelW
SizeofResource
TlsFree
TlsGetValue
WriteConsoleA
WriteFile
WriteProfileSectionW
user32
CascadeChildWindows
CharPrevA
CharUpperBuffA
CheckMenuItem
DdeConnect
EndDialog
EnumDisplayDevicesW
EnumDisplaySettingsExA
GetClipboardSequenceNumber
GetDC
GetGuiResources
GetInternalWindowPos
GetMenuItemInfoA
GetUpdateRgn
IMPGetIMEW
IMPQueryIMEW
MessageBeep
PostMessageA
RegisterDeviceNotificationA
SetClassLongA
SetClassWord
SetSystemCursor
SetThreadDesktop
SetWindowContextHelpId
ShowOwnedPopups
gdi32
CreateDCA
CreateDIBPatternBrushPt
CreatePalette
CreateScalableFontResourceA
ExtCreatePen
ExtCreateRegion
ExtTextOutA
GdiPlayDCScript
GetNearestColor
GetOutlineTextMetricsW
GetTextMetricsW
GetWindowOrgEx
OffsetRgn
PolyPolyline
PolyTextOutW
RectInRegion
RectVisible
StretchDIBits
UpdateICMRegKeyA
gdiPlaySpoolStream
Sections
.text Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ