Static task
static1
Behavioral task
behavioral1
Sample
07fc26b49675f4fb0f149ccb3f1c0781.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
07fc26b49675f4fb0f149ccb3f1c0781.exe
Resource
win10v2004-20240226-en
General
-
Target
07fc26b49675f4fb0f149ccb3f1c0781
-
Size
45KB
-
MD5
07fc26b49675f4fb0f149ccb3f1c0781
-
SHA1
241f2a692dda047809849340a0e8e5c35df4f383
-
SHA256
25f15f5ec0aae25993619a0fbc09320a19ebf8ad3a08e7a647a9fc2a87fcbc85
-
SHA512
5fd73f4fbe8f4925706bb7c4a03870745ef0c65960f13ec8306fb7bf035583f08a0a653e83cf7fc30ebcca3d002630259bf0290e5740cbf8ce53d3bb2adb8934
-
SSDEEP
768:hkMDwAgjZgvCngjgPPotdgI2MyzNORQtOflIwoHNV2XBFV7JBDld7ZsBGWdaFrzZ:9kAgjZeCgjvtdgI2MyzNORQtOflIwoHw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07fc26b49675f4fb0f149ccb3f1c0781
Files
-
07fc26b49675f4fb0f149ccb3f1c0781.exe windows:5 windows x86 arch:x86
4af8dba28c3f384f880ddf5626b0fb67
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DefWindowProcA
RegisterClassExA
CreateWindowExA
TranslateMessage
SendMessageA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
FillRect
GetDC
GetWindowRect
SetWindowPos
DispatchMessageA
PostMessageA
kernel32
GetModuleHandleA
GetCommandLineA
FindClose
CreateFileMappingA
DeleteFileA
CloseHandle
GetLastError
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idata Size: 1024B - Virtual size: 1015B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ