Static task
static1
Behavioral task
behavioral1
Sample
c7741769a0e6258d5980e8ac3eb1c70e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c7741769a0e6258d5980e8ac3eb1c70e.exe
Resource
win10v2004-20240226-en
General
-
Target
c7741769a0e6258d5980e8ac3eb1c70e
-
Size
84KB
-
MD5
c7741769a0e6258d5980e8ac3eb1c70e
-
SHA1
b5c3dc6cdc4cd14aaa31800f972bde40cc49e953
-
SHA256
798dae4fa086e7d07c02b29c6e213e6922bd0b34717f5e28fc9ca13bfcbeed9d
-
SHA512
1869ca4617c5b7389241e075789954ff10cf44a10dd662bf078e81b61fca354bf3eb280b2b094b608f0e3c89ba62e2514563b7b02698c5e12110baf382959f79
-
SSDEEP
1536:fMchiQSA+vN6c7dEqxK/OgPHl/pI1URcCpi+11:kY0A+vNh7dEqxK/Og/l/+1UR3z11
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7741769a0e6258d5980e8ac3eb1c70e
Files
-
c7741769a0e6258d5980e8ac3eb1c70e.exe windows:4 windows x86 arch:x86
2e033fbe461e0dd0bd030b47ed27a691
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
HeapFree
CloseHandle
GetDateFormatA
CloseHandle
lstrlenA
CloseHandle
FreeLibrary
CloseHandle
GetLocalTime
CloseHandle
GlobalFree
CloseHandle
GlobalAlloc
CloseHandle
lstrcpyA
CloseHandle
Sleep
CloseHandle
lstrcpynA
user32
DialogBoxParamA
DrawIcon
AlignRects
BlockInput
CopyIcon
GetFocus
CopyImage
LoadMenuA
GetWindowTextA
GetDlgItem
CreateIcon
GetMenu
DrawTextA
EndDialog
GetDC
GetCursor
DrawIconEx
CloseWindow
DialogBoxParamW
DrawTextW
GetWindowTextLengthA
InsertMenuA
AppendMenuA
CopyRect
AppendMenuW
CalcMenuBar
IsWindow
LoadCursorA
IsMenu
CalcMenuBar
IsMenu
CreateIcon
DialogBoxParamW
DialogBoxParamA
InsertMenuA
CloseWindow
AlignRects
GetDlgItem
IsWindow
DrawTextW
CopyRect
GetCursor
DrawIconEx
EndDialog
GetWindowTextLengthA
CopyIcon
BlockInput
GetFocus
GetMenu
LoadMenuA
CopyImage
GetWindowTextA
AppendMenuW
DrawIcon
GetDC
AppendMenuA
LoadCursorA
DrawTextA
advapi32
RegEnumKeyW
RegEnumValueA
RegEnumKeyExW
RegOpenKeyExA
RegQueryValueExA
RegEnumValueW
RegDeleteValueW
RegFlushKey
RegOpenKeyExW
RegCreateKeyExA
RegDeleteKeyA
RegReplaceKeyW
RegOpenKeyW
RegQueryValueExW
RegOpenKeyA
RegQueryValueW
RegReplaceKeyA
RegQueryValueA
RegLoadKeyA
RegDeleteValueA
RegQueryInfoKeyA
RegLoadKeyW
RegQueryInfoKeyW
RegDeleteKeyW
RegGetKeySecurity
RegCreateKeyExW
RegCreateKeyW
RegEnumKeyExA
RegEnumKeyA
RegEnumKeyW
RegOpenKeyA
RegOpenKeyExW
RegQueryInfoKeyW
RegGetKeySecurity
RegDeleteKeyA
RegOpenKeyW
RegEnumKeyExA
RegCreateKeyExA
RegLoadKeyW
RegQueryValueExA
RegQueryValueA
RegEnumValueA
RegEnumValueW
RegLoadKeyA
RegOpenKeyExA
RegQueryValueW
RegDeleteValueW
RegEnumKeyA
RegDeleteKeyW
RegQueryValueExW
RegEnumKeyExW
RegReplaceKeyW
RegReplaceKeyA
RegQueryInfoKeyA
RegDeleteValueA
RegFlushKey
RegCreateKeyExW
RegCreateKeyW
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rddda Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eaata Size: 7KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.redoc Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.iaada Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ