Static task
static1
Behavioral task
behavioral1
Sample
7624ca73f8b0a54764da74fe0813b1d41a3921ebede7f664bd231c65fc511142.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7624ca73f8b0a54764da74fe0813b1d41a3921ebede7f664bd231c65fc511142.exe
Resource
win10v2004-20240508-en
General
-
Target
7624ca73f8b0a54764da74fe0813b1d41a3921ebede7f664bd231c65fc511142
-
Size
344KB
-
MD5
4053d4a2adbb9859f2f426be970a4785
-
SHA1
668333f8c6c250c2f9e64430bf9a028aeccc1822
-
SHA256
7624ca73f8b0a54764da74fe0813b1d41a3921ebede7f664bd231c65fc511142
-
SHA512
03ef3119dff9aa8d129c7020873f9e4056bd775ddd5921366e45b007b3be40827b4bd174bffe00158da218fef8ca734590ba89ad342468fd742d7368b0f83314
-
SSDEEP
6144:QBfFkE9lHmJdlqdtvFIjK+nbJMaPRJRNAEcgLzJbM:QBx9QdMwKuJMa5HNA9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7624ca73f8b0a54764da74fe0813b1d41a3921ebede7f664bd231c65fc511142
Files
-
7624ca73f8b0a54764da74fe0813b1d41a3921ebede7f664bd231c65fc511142.exe windows:1 windows x86 arch:x86
0d39995c307921de955390d6d76e61cc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesA
GetSystemTimeAsFileTime
GetSystemTime
ExitProcess
MoveFileA
HeapReAlloc
HeapFree
GetProcessHeap
HeapAlloc
GetEnvironmentVariableA
SetEndOfFile
GetFileSize
CloseHandle
CreateFileA
SetFilePointer
GetFileType
DeleteFileA
GetTempFileNameA
GetLastError
GetTempPathA
WriteFile
ReadFile
GetStdHandle
InitializeCriticalSection
GetCommandLineA
GetEnvironmentStrings
comdlg32
GetOpenFileNameA
GetSaveFileNameA
Sections
.TEXT Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 241KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 806B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ