Static task
static1
Behavioral task
behavioral1
Sample
c7fe45b8b107874dc22cec6da8624974.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c7fe45b8b107874dc22cec6da8624974.exe
Resource
win10v2004-20240226-en
General
-
Target
c7fe45b8b107874dc22cec6da8624974
-
Size
1.0MB
-
MD5
c7fe45b8b107874dc22cec6da8624974
-
SHA1
6f15691c6e1db86873d824c2e9af556d154bcc6c
-
SHA256
8184d353096cb1a94a87e0e8588791cc85eeecb8a7b3c1df3e978183e2fe0ecf
-
SHA512
a0fd82adfd66bc9c072ce5f7a2b3a7d86c3220947a72974074fd0bb54a4c2a64bb40a818aa70ace5283ecadcbc09585e26de3b569bf07d2bdc5d9c767b0cd82d
-
SSDEEP
24576:hyB0id2AupUAsAdQKQ0fuEalmU0q9qExNY0wI:hG0igNbX5uvlxBUPk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7fe45b8b107874dc22cec6da8624974
Files
-
c7fe45b8b107874dc22cec6da8624974.exe windows:4 windows x86 arch:x86
6e1b43d347fd6d01564e19f768799879
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
GetVersion
lstrlenA
CloseHandle
GetModuleHandleA
GetStartupInfoA
GetLastError
gdi32
GetObjectA
CreateCompatibleDC
CreateFontIndirectA
ExtTextOutA
CreateSolidBrush
GetTextMetricsA
MoveToEx
DeleteObject
GetTextExtentPoint32A
GetDeviceCaps
GetPixel
GetBkColor
msvcrt
wcslen
exit
_XcptFilter
__CxxFrameHandler
__getmainargs
user32
MessageBoxA
GetFocus
CreateWindowExA
PostQuitMessage
DefWindowProcA
ShowWindow
LoadIconA
EndPaint
GetSysColor
TranslateMessage
GetWindowRect
DestroyWindow
GetMessageA
DialogBoxParamA
SetFocus
EndDialog
GetClientRect
ScreenToClient
DispatchMessageA
Sections
.text Size: 1024B - Virtual size: 993B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 499B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1018KB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ