Static task
static1
Behavioral task
behavioral1
Sample
7fb2e565e9cffadaa742a2439732ab89.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7fb2e565e9cffadaa742a2439732ab89.exe
Resource
win10v2004-20231215-en
General
-
Target
7fb2e565e9cffadaa742a2439732ab89
-
Size
7KB
-
MD5
7fb2e565e9cffadaa742a2439732ab89
-
SHA1
f94eefe2ff6af18213f9c26561eb7de9b906b028
-
SHA256
6d566dca4d13de63368a118b672fb62824eb2ffb756b6cbd737898da8ba8c3ac
-
SHA512
4b8a3c7d95bec9d43dccabb5bf03231acd7e8a1bdd7447b6934014f9dbc7866aef53e5935eab060348b2c7b0433fb0de29fecc87374033241d7cb36180b10937
-
SSDEEP
192:gJVU3zB+RJdrCTH9+D5org82tbzc+zFoIdl:pzE9rCTqDqsFom
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7fb2e565e9cffadaa742a2439732ab89
Files
-
7fb2e565e9cffadaa742a2439732ab89.exe windows:4 windows x86 arch:x86
6dedc3fe01fb728eae88a3a5fa1dd84f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetWindowThreadProcessId
advapi32
RegSetValueExA
wininet
FindFirstUrlCacheEntryA
urlmon
URLDownloadToFileA
ole32
OleUninitialize
oleaut32
VariantInit
Sections
.text Size: 4KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE