Behavioral task
behavioral1
Sample
7zFMmgr.exe
Resource
win7-20240221-en
General
-
Target
7zFMmgr.exe
-
Size
286KB
-
MD5
ae7fe5d1c0c635496c2729eba26355e0
-
SHA1
4b4c8a79fbd911904ebfa0b26915f588b3a8b49a
-
SHA256
b393d21a034f5cac91bcb63d6132d72f6edea162b7c919297c9d39e5b1ce42d8
-
SHA512
06dece29658f5fb90bbf953aab89696b986efd9d4f93ae32672bd59235e3328b68bd3e2974eda07900295cc751c7f61e08b7d9ed50949b7be14d293797772a4d
-
SSDEEP
6144:uAcCIWiyr7JHn17lTBl3+ocmQ1t274+dTc:uAQK7517lT33c1t274+dTc
Malware Config
Signatures
-
Ramnit family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7zFMmgr.exe
Files
-
7zFMmgr.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 144KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE