Static task
static1
Behavioral task
behavioral1
Sample
7bfd0264ca70da8e5d50051cdbd9ea56770e00e9a51374201390a095bdb8ee54.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7bfd0264ca70da8e5d50051cdbd9ea56770e00e9a51374201390a095bdb8ee54.exe
Resource
win10v2004-20240226-en
General
-
Target
7bfd0264ca70da8e5d50051cdbd9ea56770e00e9a51374201390a095bdb8ee54
-
Size
6.7MB
-
MD5
1cf06e95a4d09ce2b413d8441c4e4999
-
SHA1
b4b831f0bfe7c2ca7e05cc0dd4c43ed68b5910e0
-
SHA256
7bfd0264ca70da8e5d50051cdbd9ea56770e00e9a51374201390a095bdb8ee54
-
SHA512
6eb72dd274cced8ef19de7b6166cb16baa2a0f07d098ab0270a9749916babdca6f0b68048b7ea6b6074a564fda5f345067d75e13f1a4b4774d6517f5bbb316e1
-
SSDEEP
98304:APTDXGf45JwB1uJhBZN5PoLi5oIq8UWSmfYx7Cg43BSiWtXUWhuctj:iDX0YsaR5R5bqrmAggKoiW/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7bfd0264ca70da8e5d50051cdbd9ea56770e00e9a51374201390a095bdb8ee54
Files
-
7bfd0264ca70da8e5d50051cdbd9ea56770e00e9a51374201390a095bdb8ee54.exe windows:5 windows x86 arch:x86
63fcc39bcdb82f10c467d6da680525e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutUnprepareHeader
ws2_32
accept
rasapi32
RasGetConnectStatusA
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
wsprintfA
CharUpperBuffW
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
SHGetSpecialFolderPathA
ole32
StgCreateDocfileOnILockBytes
oleaut32
SafeArrayGetUBound
comctl32
ord17
oledlg
ord8
wininet
InternetCanonicalizeUrlA
comdlg32
GetOpenFileNameA
Sections
.text Size: - Virtual size: 538KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 334KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.4f[ Size: - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.htext Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.~J; Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.i+S Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
./Nd Size: 6.7MB - Virtual size: 6.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ