Static task
static1
Behavioral task
behavioral1
Sample
d7be6dcde3063fdff520ddebbe670e80baaebfaed56d2e161157e603d9957ade.exe
Resource
win7-20231129-en
General
-
Target
d7be6dcde3063fdff520ddebbe670e80baaebfaed56d2e161157e603d9957ade
-
Size
5.8MB
-
MD5
bd212cca19a8533e1cb225f20ffed2e1
-
SHA1
d9240fd55b5903076386c4c660b0aa04631b5e49
-
SHA256
d7be6dcde3063fdff520ddebbe670e80baaebfaed56d2e161157e603d9957ade
-
SHA512
7a6daead9cbf4a9d10b18018b044f5f5612d049fce0a67ca7fc318ebd300fcf948ab1c21e3c7bbf48a323dc1d461c9bc63a87efd1295b23c79dada65dafe5927
-
SSDEEP
98304:lXbVN8xlBvA29aF5vILAR3tW96GL0Srk66INWNLSQ71MoWBqYyg5vd/+vuxM:lLrQI290ec3tW4Th66AWRTaoWBqbIvd4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d7be6dcde3063fdff520ddebbe670e80baaebfaed56d2e161157e603d9957ade
Files
-
d7be6dcde3063fdff520ddebbe670e80baaebfaed56d2e161157e603d9957ade.exe windows:6 windows x86 arch:x86
980aa255e7e76def05f32c57f38059f8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
wsprintfA
gdi32
CreateCompatibleBitmap
advapi32
RegEnumKeyA
shell32
ShellExecuteA
ole32
CoInitializeEx
ws2_32
WSAStartup
crypt32
CryptUnprotectData
shlwapi
PathFindExtensionA
gdiplus
GdiplusStartup
setupapi
SetupDiEnumDeviceInterfaces
ntdll
RtlUnicodeStringToAnsiString
Sections
.text Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp¹˜ Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp¹˜ Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp¹˜ Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ