Static task
static1
Behavioral task
behavioral1
Sample
7eacd09ea650135b9f6e8a80fac3dc7568d600b38d6ba82928d61d558a55487d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7eacd09ea650135b9f6e8a80fac3dc7568d600b38d6ba82928d61d558a55487d.exe
Resource
win10v2004-20240226-en
General
-
Target
7eacd09ea650135b9f6e8a80fac3dc7568d600b38d6ba82928d61d558a55487d
-
Size
31KB
-
MD5
9dd0bfade0dd6a088d8ae1d96fe4c358
-
SHA1
b32215c1e0e90413c937bc4515acf10c0daa76fb
-
SHA256
7eacd09ea650135b9f6e8a80fac3dc7568d600b38d6ba82928d61d558a55487d
-
SHA512
e546e7b9f4ba87f1d1dbbe77986be46b999d1b03e7c11fe2bf90c8982755cbdf565648fe6f53a624b646c6e7208bc5c214fb2a77fa1ec2195f89e7b7cece89e5
-
SSDEEP
384:tk2Wz6pL3a2a999999996cNyoYkytbdH4TIem29nu:K1z6pLxa999999996cgoYkytbdH4Uiu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7eacd09ea650135b9f6e8a80fac3dc7568d600b38d6ba82928d61d558a55487d
Files
-
7eacd09ea650135b9f6e8a80fac3dc7568d600b38d6ba82928d61d558a55487d.exe windows:4 windows x86 arch:x86
42c4dbd295c85503c861f4931dbd756d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetFocus
MessageBoxA
EndDialog
DispatchMessageW
SendMessageW
GetDlgItem
DialogBoxParamW
SetCapture
GetWindowTextW
TrackPopupMenu
FlashWindowEx
TranslateAcceleratorA
GetKeyState
GetMessageW
GetDlgItemTextA
kernel32
GetModuleHandleW
HeapAlloc
GetProcessHeap
CloseHandle
HeapFree
GetVersionExW
ExitProcess
comctl32
ord17
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 716B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 862B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 270B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.htext Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE