Static task
static1
Behavioral task
behavioral1
Sample
7fecc32cb1e5d7f803e3fd8d4e8e1aed.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7fecc32cb1e5d7f803e3fd8d4e8e1aed.exe
Resource
win10v2004-20231215-en
General
-
Target
7fecc32cb1e5d7f803e3fd8d4e8e1aed
-
Size
180KB
-
MD5
7fecc32cb1e5d7f803e3fd8d4e8e1aed
-
SHA1
8acc8a7f1a09e1dd3139303ce358cf91772349c5
-
SHA256
bd2237430098fadc8f446644b27876b7e06282be343b022dbc644d792ea20472
-
SHA512
134733a0a1916206feb4e7a6be4ce9bd9a590fb3aee78692278967b1b2acefcb47db5607cfa7b23d31a306a5a0a31470c8871c9031385d9c7b3cee39b9293d6e
-
SSDEEP
3072:z5WvUcAstnUjUSEkxlG0NWOyXSxw5cJshJlBETYsuZnFEIFd7bL7CJRoYc:z5Ws8nUjWutkYXMJlBBPFd7f6Nc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7fecc32cb1e5d7f803e3fd8d4e8e1aed
Files
-
7fecc32cb1e5d7f803e3fd8d4e8e1aed.exe windows:4 windows x86 arch:x86
112af68219680d4c9b7616f1b0ea3dfb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
ReleaseCapture
FlashWindow
ValidateRgn
SetCapture
EnableWindow
ExcludeUpdateRgn
GetCapture
UpdateWindow
ValidateRect
InvalidateRgn
IsWindow
DestroyWindow
IsWindowEnabled
RealGetWindowClassA
GetUpdateRgn
kernel32
QueryPerformanceCounter
DeleteCriticalSection
CreateFiber
CreateThread
TerminateThread
GetExitCodeThread
CreateEventW
GetCurrentThread
ResumeThread
LocalFree
EnumResourceNamesA
SetEvent
GetSystemDirectoryW
QueryPerformanceFrequency
LocalAlloc
SetThreadPriority
LeaveCriticalSection
InitializeCriticalSection
GetSystemDefaultLangID
EnterCriticalSection
GetCommandLineW
SetThreadIdealProcessor
MultiByteToWideChar
GetCurrentProcess
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
Sections
.text Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imul Size: 512B - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ