Static task
static1
Behavioral task
behavioral1
Sample
c7c52c568c85aa7df92bad641f7561a6c9dafd9be0a80b7253919c5797fed174.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c7c52c568c85aa7df92bad641f7561a6c9dafd9be0a80b7253919c5797fed174.exe
Resource
win10v2004-20231215-en
General
-
Target
c7c52c568c85aa7df92bad641f7561a6c9dafd9be0a80b7253919c5797fed174
-
Size
248KB
-
MD5
63330af2912fd139f5edb73c359724c4
-
SHA1
2773ac92b35e0839126bbb6cc09b085c62030bcf
-
SHA256
c7c52c568c85aa7df92bad641f7561a6c9dafd9be0a80b7253919c5797fed174
-
SHA512
77f278c9b3d5c1c9a279d045732c848bbbbe4d106214bfbef45e57b9afec36c2e79900908849f896e029b5eb32bc91358e6a0a7c38efde149a7beb41fda67dc5
-
SSDEEP
6144:qeKRVy8zJwza0ITV61FPTBxqmFCJyMgg:qe8Vy8WzaxTM15TvqFJyB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7c52c568c85aa7df92bad641f7561a6c9dafd9be0a80b7253919c5797fed174
Files
-
c7c52c568c85aa7df92bad641f7561a6c9dafd9be0a80b7253919c5797fed174.exe windows:5 windows x86 arch:x86
0b812cbf6d453459ca55d194de1e9654
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
version
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoW
GetFileVersionInfoA
VerQueryValueA
kernel32
CloseHandle
CreateFileA
GetModuleFileNameA
CopyFileA
DeleteFileA
GetFileSize
FindClose
FindNextFileA
FindFirstFileA
GetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetCurrentDirectoryA
GetFullPathNameA
FileTimeToSystemTime
WriteFile
CreateThread
ReadFile
SetFilePointer
GetDiskFreeSpaceW
RemoveDirectoryW
FindNextFileW
DeleteFileW
FindFirstFileW
GetWindowsDirectoryW
CreateDirectoryW
GetTempPathW
GetModuleFileNameW
SetFileAttributesW
CopyFileW
CreateFileW
MoveFileW
SetFileTime
CreateDirectoryA
WaitForSingleObject
FreeLibrary
GetProcAddress
LoadLibraryA
GetExitCodeThread
WriteConsoleA
MoveFileExA
MoveFileExW
GetExitCodeProcess
CreateProcessW
GetVersion
WideCharToMultiByte
GlobalFree
GlobalAlloc
GetProcessHeap
SetEndOfFile
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapCreate
HeapReAlloc
VirtualAlloc
VirtualFree
SetStdHandle
HeapSize
RaiseException
GetConsoleOutputCP
WriteConsoleW
ResumeThread
InitializeCriticalSectionAndSpinCount
GetFileAttributesA
RtlUnwind
MultiByteToWideChar
GetModuleHandleW
Sleep
ExitProcess
GetFileAttributesW
HeapAlloc
HeapFree
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
user32
CreateWindowExA
TranslateMessage
DispatchMessageA
RegisterClassA
DefWindowProcA
CreateDialogParamA
GetDC
DrawIcon
PostQuitMessage
LoadStringW
LoadStringA
GetDlgItemTextW
SetDlgItemTextW
MessageBoxW
DestroyWindow
DialogBoxParamA
EnableWindow
GetWindowLongA
EndDialog
SetFocus
SetWindowLongA
PostMessageA
MessageBoxA
GetWindowTextA
UpdateWindow
LoadIconA
SendMessageA
LoadImageA
ShowWindow
GetDlgItem
SetWindowTextA
GetMessageA
advapi32
RegCloseKey
RegOpenKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
shell32
ShellExecuteExW
Sections
.text Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ