Static task
static1
Behavioral task
behavioral1
Sample
7e1f0e60c78921657add1b14b5994d15a350ec45cf7e9a9acadd861122f7694e.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7e1f0e60c78921657add1b14b5994d15a350ec45cf7e9a9acadd861122f7694e.exe
Resource
win10v2004-20240802-en
General
-
Target
7e1f0e60c78921657add1b14b5994d15a350ec45cf7e9a9acadd861122f7694e
-
Size
43KB
-
MD5
7e93146e9d916bc7bc6ca0a0607dce9c
-
SHA1
0a6407590c68c9e838a4a8f5fd6db41e2a201503
-
SHA256
7e1f0e60c78921657add1b14b5994d15a350ec45cf7e9a9acadd861122f7694e
-
SHA512
f3701b1d40b7bc17fadcc66b075aa781259922258cf62c55e860c21f03aaf2a552d10446cfe0ce74aa8f1e2e6c7b3af8c895b0a423225ed5e2cb62c74899e63d
-
SSDEEP
768:A/E+UlejKbjWwKtUZS6KUAghE3c1ng8o6dlZYsmx:AC2tUZdHAMEyngBISrx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e1f0e60c78921657add1b14b5994d15a350ec45cf7e9a9acadd861122f7694e
Files
-
7e1f0e60c78921657add1b14b5994d15a350ec45cf7e9a9acadd861122f7694e.exe windows:4 windows x86 arch:x86
13169adaa55a4b4676c2eeddc904744e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__commode
_controlfp
_except_handler3
__set_app_type
_XcptFilter
__p__fmode
_exit
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
user32
PostQuitMessage
DialogBoxParamA
DestroyWindow
DefWindowProcA
CreateWindowExA
ShowWindow
UpdateWindow
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateMessage
DispatchMessageA
SendMessageA
kernel32
lstrcpynA
GetFileType
CloseHandle
FindNextFileA
GetFileSize
DeleteFileA
FindFirstFileA
GetModuleHandleA
CreateFileA
GetStartupInfoA
GetLogicalDriveStringsA
GetEnvironmentStringsA
FindClose
GetModuleFileNameA
gdi32
CreateFontIndirectA
comctl32
ord17
shfolder
SHGetFolderPathA
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ