Static task
static1
Behavioral task
behavioral1
Sample
7fbfceb399ccfa0421bca5487496c44a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7fbfceb399ccfa0421bca5487496c44a.exe
Resource
win10v2004-20231215-en
General
-
Target
7fbfceb399ccfa0421bca5487496c44a
-
Size
63KB
-
MD5
7fbfceb399ccfa0421bca5487496c44a
-
SHA1
ab41ab8adeeb8db52a0a2e89983d29d0b1ff7b4c
-
SHA256
73aa918617dc0daaeea1412a678436cb1fc5e3b4950abc204577878f8a9f4523
-
SHA512
34eeb9d35993ade980f95f09734b69227aa77d66cfc1eb69645338f958c03d0ecdeee6bf06a3452aa26dab9821164c8b7f04657ef3b345c1b5de3a7ff7a32bde
-
SSDEEP
1536:sDU0vMMzApDNGZj5xl0A1fpppppppppppppbDHs2jXwf:kXvM3pcFD6MfpppppppppppppbLs2jXU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7fbfceb399ccfa0421bca5487496c44a
Files
-
7fbfceb399ccfa0421bca5487496c44a.exe windows:4 windows x86 arch:x86
fc9549db5f729ae4cee6e8749d80e581
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateThread
GetConsoleMode
SetEnvironmentVariableA
ReleaseMutex
HeapCreate
CloseHandle
lstrlenW
CreateFileA
SetLastError
LoadLibraryExW
LocalFree
PulseEvent
FindResourceA
GetCurrentThreadId
TlsGetValue
Sleep
GetModuleHandleA
GetStdHandle
CreateMutexA
GlobalUnlock
user32
CallWindowProcA
GetClipCursor
CopyRect
DrawEdge
IsWindow
DrawMenuBar
SetFocus
GetDC
GetIconInfo
CheckRadioButton
GetDlgItem
DispatchMessageA
FillRect
apphelp
SdbGetDatabaseID
SdbFindFirstTag
SdbFindNextTag
ApphelpCheckIME
SdbCloseDatabase
clbcatq
ComPlusMigrate
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uvojmgu Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
enpqnxx Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE