Static task
static1
Behavioral task
behavioral1
Sample
DSC-NewPicture10.JPG_www.24x7filehosting.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
DSC-NewPicture10.JPG_www.24x7filehosting.exe
Resource
win10v2004-20231215-en
General
-
Target
9956663df4246991cedabaa8f2ff84e8
-
Size
185KB
-
MD5
9956663df4246991cedabaa8f2ff84e8
-
SHA1
de552839f6578d2f88acae42c2978ab8333fb12b
-
SHA256
129208241ff291da2d0046038cf5f961a059784f93ba7db025b75e1ec5e974cb
-
SHA512
d41eecf8cd4295d0652b55bd93c932bf78394e262d56e7d361d27e5f24543975c0090d302229bc7cbd525ae1780a0e3c65ef2414c2ff57e98db0ad8b7b547b6a
-
SSDEEP
3072:Pe3fkEOBsEKcuZQONarf9vi+OeKgtHo0UqHPNgy3ZZRJfsZSu6F6IQ0Nx:GPkEbadOOf96+OitHo0UGgY3f8Da/Qa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/DSC-NewPicture10.JPG_www.24x7filehosting.com
Files
-
9956663df4246991cedabaa8f2ff84e8.zip
-
DSC-NewPicture10.JPG_www.24x7filehosting.com.exe windows:5 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: 130KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iwmvrzec Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fdw9qqhp Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
i.l.jjmc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ