Static task
static1
Behavioral task
behavioral1
Sample
7742a6f6e493398003de14c4cf706e12a3258165282a44273fbb164be9a45255.exe
Resource
win7-20240704-en
General
-
Target
7742a6f6e493398003de14c4cf706e12a3258165282a44273fbb164be9a45255
-
Size
399KB
-
MD5
b34ddd099a0e1a2d6f098de08dc132f3
-
SHA1
7398b696dbb803ff5bae4e249f117795dc519c08
-
SHA256
7742a6f6e493398003de14c4cf706e12a3258165282a44273fbb164be9a45255
-
SHA512
b00ac034afacbd15adb9f170c8499cc3935fea67a1b1753a4811cc13ecf996644f9df2d74d500e22a597013f2b6863b0ab5a80a03946b142c226240d718836d9
-
SSDEEP
6144:WyMovKYtIK4zAGmAymr1UNK1IvbvbkiQ7PcYYV+L6b2r5Otn:WIBtIKJnG1UqYPXikYvot
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7742a6f6e493398003de14c4cf706e12a3258165282a44273fbb164be9a45255
Files
-
7742a6f6e493398003de14c4cf706e12a3258165282a44273fbb164be9a45255.exe windows:5 windows x86 arch:x86
40585a2830158a9dd30dce20d7448027
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateJobObjectW
CreateHardLinkA
GetProcessPriorityBoost
GetModuleHandleW
GetTickCount
GetConsoleAliasesA
GetNumberFormatA
EnumTimeFormatsW
EnumResourceTypesA
GetConsoleCP
GlobalAlloc
GetSystemDirectoryW
SetFileShortNameW
LoadLibraryW
IsProcessInJob
FatalAppExitW
IsBadCodePtr
SetVolumeMountPointA
HeapValidate
GetModuleFileNameW
ReplaceFileA
LCMapStringA
GetLastError
SetLastError
GetProcAddress
SetEnvironmentVariableW
PeekConsoleInputW
CreateNamedPipeA
VerLanguageNameW
LoadLibraryA
CreateFileMappingA
SetConsoleCtrlHandler
AddAtomA
HeapWalk
GetOEMCP
EnumDateFormatsA
GetModuleHandleA
EnumResourceNamesA
SetProcessShutdownParameters
GetDiskFreeSpaceExA
LCMapStringW
HeapSize
WriteConsoleW
FlushFileBuffers
SetStdHandle
EnumCalendarInfoW
LocalCompact
WriteConsoleInputW
GlobalCompact
FindVolumeMountPointClose
CreateFileA
CreateFileW
HeapReAlloc
GetCommandLineW
HeapSetInformation
GetStartupInfoW
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapAlloc
ExitProcess
SetFilePointer
HeapCreate
HeapFree
CloseHandle
WriteFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
Sleep
RaiseException
GetConsoleMode
RtlUnwind
ReadFile
user32
GetMessageExtraInfo
ChangeMenuA
GetMenu
DrawStateW
GetSysColorBrush
DrawMenuBar
SetCaretPos
CharUpperBuffA
gdi32
GetCharWidthI
CreateDCA
GetCharABCWidthsI
advapi32
RegisterEventSourceW
msimg32
AlphaBlend
Sections
.text Size: 294KB - Virtual size: 294KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 36.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lisat Size: 1024B - Virtual size: 723B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cutem Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ