Static task
static1
Behavioral task
behavioral1
Sample
7d1b552a53b2fa3ac7a3ba50bb9fffa9269cf88e61232a0012b33adb3e4bca5f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7d1b552a53b2fa3ac7a3ba50bb9fffa9269cf88e61232a0012b33adb3e4bca5f.exe
Resource
win10v2004-20240412-en
General
-
Target
7d1b552a53b2fa3ac7a3ba50bb9fffa9269cf88e61232a0012b33adb3e4bca5f
-
Size
192KB
-
MD5
6a2583d48e7115491ba67aecd9b56682
-
SHA1
af1103eaea8e659d6d80b72c30e6483a9d566f43
-
SHA256
7d1b552a53b2fa3ac7a3ba50bb9fffa9269cf88e61232a0012b33adb3e4bca5f
-
SHA512
f6d8fd8e93d7db51172d9d9c8b56b7922c651deed4300c8cc8f3ca5fc4b040e5669b9f7045be5670f0eb0c2963bbeb07ee6fcb4f77492ea09651b9d46de1cda0
-
SSDEEP
6144:KQOp24stygkB4tEq6rjMeKp9Na+JNmgcPLH:KQOpAxVtEJKXNAgE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d1b552a53b2fa3ac7a3ba50bb9fffa9269cf88e61232a0012b33adb3e4bca5f
Files
-
7d1b552a53b2fa3ac7a3ba50bb9fffa9269cf88e61232a0012b33adb3e4bca5f.exe windows:4 windows x86 arch:x86
dace256d18869f7d081b5e50eef8c95c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumeInformationA
SetFileAttributesA
lstrcmpA
GetUserDefaultLangID
GetVersionExA
GetFileTime
LocalAlloc
SetFileTime
SystemTimeToFileTime
_llseek
IsDBCSLeadByte
FileTimeToSystemTime
WriteFile
lstrcpynA
SearchPathA
GetSystemDirectoryA
GetEnvironmentVariableA
GetWindowsDirectoryA
GetFileAttributesA
CreateFileA
_lopen
GetModuleFileNameA
lstrlenA
lstrcatA
GetCurrentDirectoryA
CloseHandle
LocalFree
_lclose
DeleteFileA
GetStartupInfoA
_lread
lstrcpyA
CreateDirectoryA
GetModuleHandleA
user32
DialogBoxParamA
KillTimer
CharUpperA
EnableWindow
PostMessageA
SetFocus
SendDlgItemMessageA
GetDlgItemTextA
DestroyIcon
SetWindowTextA
GetSystemMetrics
GetWindowRect
MoveWindow
LoadIconA
SetTimer
IsIconic
EndPaint
SendMessageA
SetDlgItemTextA
PeekMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
wsprintfA
CharLowerA
CharNextA
CharPrevA
EndDialog
MessageBoxA
BeginPaint
GetDlgItem
DrawIcon
gdi32
SetMapMode
GetMapMode
comdlg32
GetOpenFileNameA
GetFileTitleA
advapi32
RegCreateKeyA
RegSetValueA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
ShellExecuteA
crtdll
_global_unwind2
_exit
_local_unwind2
exit
strchr
strrchr
atoi
memset
_XcptFilter
_acmdln_dll
_initterm
__GetMainArgs
_commode_dll
_fmode_dll
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 149B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 167KB - Virtual size: 238KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE