Static task
static1
Behavioral task
behavioral1
Sample
b7f726b7d38a08d1c8d6b4c478d77d89.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b7f726b7d38a08d1c8d6b4c478d77d89.exe
Resource
win10v2004-20240226-en
General
-
Target
b7f726b7d38a08d1c8d6b4c478d77d89
-
Size
28KB
-
MD5
b7f726b7d38a08d1c8d6b4c478d77d89
-
SHA1
5b6e954b5f8a19ee91da5d2e19d51be196997447
-
SHA256
94255409e39d323f92e2d732b430dd67bf6b4b8e3dcab6dbd3940672c22ca876
-
SHA512
cba0f1df4079bec37088cc155df32c5061bfdb1fcd38c6bde78648505b59f3deb0bf66147ccd72bb58957c9b98510c6d0b716cf06e8143a2e276f8d54ec039b2
-
SSDEEP
768:x8Tv9xsmxtjxfh5MFAgZsEOueMB3ygvANMZKT/uAPGk:CdYFwVMBxRKTGAek
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7f726b7d38a08d1c8d6b4c478d77d89
Files
-
b7f726b7d38a08d1c8d6b4c478d77d89.exe windows:4 windows x86 arch:x86
4b2de9246957983af560c4fcf570a447
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteObject
DeleteDC
CloseMetaFile
GetDCOrgEx
SetTextColor
ClearBitmapAttributes
BeginPath
ExtTextOutA
AddFontResourceExW
AddFontResourceW
GetPixel
GetClipBox
GetCurrentPositionEx
AddFontResourceA
AddFontMemResourceEx
ClearBrushAttributes
ExcludeClipRect
RestoreDC
shell32
SHUpdateImageA
SHUpdateImageW
ExtractIconResInfoW
ExtractIconA
ExtractIconEx
SHDoDragDrop
DragQueryFileW
DragQueryPoint
FindExeDlgProc
SHChangeNotifyDeregister
ExtractIconResInfoA
ShellAboutA
SHDefExtractIconW
RestartDialog
CommandLineToArgvW
DllGetVersion
CheckEscapesW
DragQueryFile
FreeIconList
DragQueryFileAorW
DragQueryPoint
ExtractIconResInfoW
RestartDialog
SHDefExtractIconW
ShellAboutA
SHFindFiles
CommandLineToArgvW
DragAcceptFiles
ExtractIconEx
ExtractIconA
SHChangeNotifyRegister
ExtractIconExA
DllGetVersion
DragQueryFileA
SHUpdateImageA
PathGetShortPath
CheckEscapesA
DragQueryFileAorW
DragQueryFileW
FreeIconList
SHUpdateImageW
DragQueryFileA
CheckEscapesW
SHFindFiles
ExtractIconResInfoW
SHDefExtractIconW
FindExeDlgProc
DragFinish
DllGetVersion
SHChangeNotifyRegister
ExtractIconEx
SHUpdateImageA
ExtractIconA
RestartDialog
ExtractIconExA
SHChangeNotifyDeregister
DragAcceptFiles
DragQueryFile
SHDefExtractIconA
ShellAboutA
comctl32
ImageList_DragMove
ImageList_GetIcon
ImageList_Read
ImageList_Remove
ImageList_LoadImage
ImageList_GetIconSize
ImageList_BeginDrag
ImageList_GetImageCount
ImageList_DrawIndirect
ImageList_DragEnter
ImageList_LoadImageW
ImageList_GetDragImage
ImageList_GetImageRect
ImageList_Merge
ImageList_Draw
ImageList_Create
ImageList_Replace
ImageList_AddMasked
ImageList_DragLeave
ImageList_LoadImageA
ImageList_ReplaceIcon
InitCommonControls
ImageList_Merge
ImageList_LoadImageW
ImageList_DragMove
ImageList_Create
ImageList_Replace
ImageList_AddMasked
ImageList_DragShowNolock
ImageList_Destroy
ImageList_GetImageRect
ImageList_DrawIndirect
ImageList_DragEnter
ImageList_GetImageInfo
ImageList_ReplaceIcon
ImageList_DragLeave
ImageList_Copy
ImageList_GetDragImage
ImageList_Read
ImageList_DrawEx
kernel32
Sleep
FindAtomA
CreateThread
GetCPInfo
CopyFileA
GetComputerNameA
DeleteFileW
CopyFileW
ExitThread
CopyFileExW
OpenFileMappingA
GetCommandLineA
GetConsoleMode
CopyFileExA
WriteFile
GetLastError
FindFirstFileA
ExitThread
FindAtomA
GetFileTime
GetLastError
CopyFileW
CreateThread
DeleteFileA
FindFirstFileA
CreateDirectoryA
WriteFile
ReadFile
OpenFileMappingA
SetLastError
GetConsoleMode
Sleep
GlobalFree
GetFileSize
CopyFileExA
CopyFileA
SetLastError
Sleep
GetCPInfo
DeleteFileW
GetFileTime
GetComputerNameA
WriteFile
ReadFile
CopyFileExW
CreateThread
DeleteFileA
FindAtomA
CopyFileA
GetStdHandle
FindFirstFileA
GetCommandLineA
ReadConsoleA
OpenFile
GetConsoleMode
DeleteAtom
GetFileSize
GetLastError
GlobalFree
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ