Static task
static1
Behavioral task
behavioral1
Sample
7f3a99a5d64783d8bbcff5c07bc9c3f73a716fe9caa929509149d9b9333716cf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7f3a99a5d64783d8bbcff5c07bc9c3f73a716fe9caa929509149d9b9333716cf.exe
Resource
win10v2004-20240226-en
General
-
Target
7f3a99a5d64783d8bbcff5c07bc9c3f73a716fe9caa929509149d9b9333716cf
-
Size
216KB
-
MD5
ddc9650a403f410273665c93af726acc
-
SHA1
28b8843e3e2a385da312fd937752cd5b529f9483
-
SHA256
7f3a99a5d64783d8bbcff5c07bc9c3f73a716fe9caa929509149d9b9333716cf
-
SHA512
391f78e534f584139b29b62c263f9ba241073379e30d6d51195f50ebc5cc0ad403f742834339b005014eb731e508e6f4c9e2fe88b473c148befb3c9faf96625e
-
SSDEEP
3072:F1FclEsVogSHmX+bjoZGQlZbsSGhqOocB:JqVTSVjoZaSgYcB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f3a99a5d64783d8bbcff5c07bc9c3f73a716fe9caa929509149d9b9333716cf
Files
-
7f3a99a5d64783d8bbcff5c07bc9c3f73a716fe9caa929509149d9b9333716cf.exe windows:4 windows x86 arch:x86
455390f7ebe1ac729ca9ba01d025c42b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceA
Sleep
CloseHandle
CreateProcessA
GetModuleFileNameA
VirtualFree
VirtualProtect
VirtualAlloc
GetProcAddress
LoadLibraryA
GetModuleHandleA
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
GetLastError
GetFileAttributesA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
WriteFile
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetExitCodeProcess
WaitForSingleObject
GetCPInfo
GetACP
GetOEMCP
CompareStringA
CompareStringW
SetEnvironmentVariableA
LCMapStringA
LCMapStringW
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ