Static task
static1
Behavioral task
behavioral1
Sample
7bcf821651483b659f7df843c17da78fe360b33c13749be9ec346afd70aaaf93.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7bcf821651483b659f7df843c17da78fe360b33c13749be9ec346afd70aaaf93.exe
Resource
win10v2004-20240709-en
General
-
Target
7bcf821651483b659f7df843c17da78fe360b33c13749be9ec346afd70aaaf93
-
Size
7KB
-
MD5
e5b36859be2129184ab3745b4a2b962f
-
SHA1
36d8565502e01bdf7498f1d126d21eb9865f375f
-
SHA256
7bcf821651483b659f7df843c17da78fe360b33c13749be9ec346afd70aaaf93
-
SHA512
e6e7ce09f9a0f0f719c32db71d89b74ac08bef4fa516d2b447cebd53466fe76355c038836cad126b5b2a01821a2a533358cd5dc358df700545e45a7380d58987
-
SSDEEP
96:mzRFXvbMUk2d5BDHN9LT+9A7XwLlZCJxSEcUOy2qp3C7tCEI4LOf:MRFfQUk4vJ+6fJx3cUOytpcI4K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7bcf821651483b659f7df843c17da78fe360b33c13749be9ec346afd70aaaf93
Files
-
7bcf821651483b659f7df843c17da78fe360b33c13749be9ec346afd70aaaf93.exe windows:5 windows x86 arch:x86
8420352db094ac94a025a3bd1c198e95
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr90
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_decode_pointer
_amsg_exit
shlwapi
PathFileExistsW
wininet
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
kernel32
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
ExpandEnvironmentStringsW
CreateFileW
CloseHandle
Sleep
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
user32
wsprintfW
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 442B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ