Static task
static1
Behavioral task
behavioral1
Sample
7e57b18704b36d9a048cedd62be3b3f0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7e57b18704b36d9a048cedd62be3b3f0N.exe
Resource
win10v2004-20240802-en
General
-
Target
7e57b18704b36d9a048cedd62be3b3f0N.exe
-
Size
256KB
-
MD5
7e57b18704b36d9a048cedd62be3b3f0
-
SHA1
7afe81fd058883797ccadf922b87842d7771265c
-
SHA256
c7192eeb1e859d810cde77b27c1fd51f41d0bb11e198c695df0ae2886cd2cb24
-
SHA512
b8ac2d050ca7ea9003d47d2d6188e10597981dd802f7abd2406bf4dda6019d57a5d67524ab7e1fb5950abec2034af6bda66415932776bd585af8768593fa7eea
-
SSDEEP
3072:WB+iGg3inS7e8VdQwmzQNcthJSKkpxj3yVf6Iu2lQBV+UdE+rECWp7hKADp:WBJynRqQIkV2BV+UdvrEFp7hKAd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e57b18704b36d9a048cedd62be3b3f0N.exe
Files
-
7e57b18704b36d9a048cedd62be3b3f0N.exe.exe windows:4 windows x86 arch:x86
d4df3969503ccceda73fbdfbdc245cc2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
FindNextFileA
CreateFileA
ExpandEnvironmentStringsA
GetDateFormatA
GetTimeFormatA
CloseHandle
FindClose
GetWindowsDirectoryA
GetDriveTypeA
GetLocalTime
MulDiv
GetModuleFileNameA
GlobalAlloc
GlobalLock
lstrcpyA
lstrlenA
GlobalUnlock
WideCharToMultiByte
ReadFile
SetCurrentDirectoryA
CreateThread
GetSystemTime
GetVersionExA
LoadLibraryA
FreeLibrary
SetErrorMode
GetFileAttributesA
GetProcAddress
MoveFileA
FileTimeToLocalFileTime
GetShortPathNameA
CompareFileTime
MultiByteToWideChar
FileTimeToSystemTime
GetProfileStringA
GetCurrentDirectoryA
GetProfileIntA
GetLastError
GetCPInfo
LCMapStringW
GetACP
GetStringTypeW
GetStringTypeA
LCMapStringA
HeapReAlloc
VirtualAlloc
IsBadWritePtr
HeapCreate
HeapDestroy
VirtualFree
GetVersion
GetCommandLineA
ExitProcess
GetModuleHandleA
RtlUnwind
GetStartupInfoA
HeapAlloc
GetCurrentProcess
HeapFree
FreeEnvironmentStringsA
FreeEnvironmentStringsW
UnhandledExceptionFilter
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
FlushFileBuffers
GetOEMCP
TerminateProcess
SetFilePointer
SetEndOfFile
GlobalFree
user32
FillRect
GetSysColor
CreateMenu
WindowFromPoint
ClientToScreen
GetMenuState
CallWindowProcA
FindWindowExA
IsMenu
GetKeyState
GetMessageTime
ChildWindowFromPoint
SetTimer
LoadIconA
CreateDialogParamA
BringWindowToTop
SetFocus
CheckRadioButton
DispatchMessageA
SetCapture
AppendMenuA
SystemParametersInfoA
ReleaseCapture
IsWindow
ScreenToClient
GetMessagePos
MapWindowPoints
LoadBitmapA
GetDlgItemInt
CheckDlgButton
SetDlgItemInt
SendMessageA
wsprintfA
RegisterClassExA
RegisterClassA
LoadAcceleratorsA
TranslateMessage
LoadStringA
GetDlgItem
ShowWindow
EnableWindow
DialogBoxParamA
EndDialog
GetWindow
GetWindowTextA
LoadImageA
EmptyClipboard
SetClipboardData
CloseClipboard
TabbedTextOutA
EndDeferWindowPos
DeferWindowPos
PostQuitMessage
IsIconic
DefWindowProcA
MessageBoxA
DestroyWindow
PostMessageA
WinHelpA
IsWindowVisible
BeginDeferWindowPos
GetParent
GetClientRect
GetSystemMetrics
SendDlgItemMessageA
GetDlgItemTextA
SetDlgItemTextA
GetWindowRect
GetDC
ReleaseDC
SetWindowPos
CheckMenuRadioItem
MapDialogRect
EnableMenuItem
SetWindowTextA
CheckMenuItem
IsDlgButtonChecked
CreatePopupMenu
GetCursorPos
MessageBeep
GetMenuItemID
GetMenuItemCount
GetMenuItemInfoA
GetMenuStringA
TrackPopupMenu
DestroyMenu
CreateWindowExA
RemoveMenu
InsertMenuA
IsDialogMessageA
GetWindowLongA
SetWindowLongA
LoadCursorA
KillTimer
SetCursor
TranslateAcceleratorA
GetMessageA
OpenClipboard
gdi32
CreateFontA
PatBlt
GetTextMetricsA
GetTextExtentPoint32A
StartPage
EndPage
SelectObject
EndDoc
StartDocA
DeleteDC
CreateFontIndirectA
CreatePolygonRgn
GetStockObject
TextOutA
SetBkMode
CreatePen
CreateSolidBrush
SetTextColor
DeleteObject
GetDeviceCaps
comdlg32
GetSaveFileNameA
GetOpenFileNameA
PrintDlgA
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegEnumKeyExA
shell32
SHChangeNotify
SHGetDesktopFolder
ShellExecuteExA
SHGetMalloc
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetFileInfoA
SHFileOperationA
ole32
StgIsStorageFile
OleUninitialize
WriteClassStg
DoDragDrop
CoCreateInstance
OleInitialize
StgCreateDocfile
StgOpenStorage
ReadClassStg
comctl32
ImageList_AddMasked
ImageList_Create
ImageList_Destroy
ord17
ImageList_Draw
CreateToolbarEx
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 104KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE