Static task
static1
Behavioral task
behavioral1
Sample
727e896dcd4e9f17d17a91f98550e8c0N.exe
Resource
win7-20240705-en
General
-
Target
727e896dcd4e9f17d17a91f98550e8c0N.exe
-
Size
1.1MB
-
MD5
727e896dcd4e9f17d17a91f98550e8c0
-
SHA1
586edcc9502f85b36b06ed09d1c2e246fcfc10a2
-
SHA256
e1c61ff005c2607e11de4f2f547fb6c0a816e3c9f9e383936ca923d9c779bcdb
-
SHA512
1054dae953fd845560383764dbaa6e83fac70ff090274ea1ab51fea1683403ec5cb7f6c1b89343be1278c4bf73d2c953fe56f28a4624d41fe891d5bcd69717e1
-
SSDEEP
6144:0ZpTc6Ht8DkIfRD83d3kFICdy20svNbD58Z31EyIEgflxktjKkEGInR+HlZzmP6f:0ZhqDkcONxn20SNuKJPUhulLhJ9FCeI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 727e896dcd4e9f17d17a91f98550e8c0N.exe
Files
-
727e896dcd4e9f17d17a91f98550e8c0N.exe.exe windows:4 windows x86 arch:x86
c1e35a855d20d45e9c84f5bd029dd388
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect
GetModuleHandleA
lstrcmpA
GetCurrentThread
GetLastError
GetCurrentThreadId
user32
GetCursorPos
GetAsyncKeyState
GetCaretBlinkTime
GetActiveWindow
RegisterClipboardFormatW
GetClassInfoExA
comctl32
InitCommonControls
advapi32
DecryptFileA
ole32
ReadOleStg
oleacc
LresultFromObject
GetRoleTextW
oleaut32
VarUI1FromDate
VarSub
VarI2FromCy
imagehlp
UnDecorateSymbolName
SymFromAddr
UnmapDebugInformation
gdi32
GdiStartPageEMF
shlwapi
SHRegCreateUSKeyA
UrlCreateFromPathW
winspool.drv
AddPortA
DocumentPropertySheets
StartDocDlgA
oledlg
OleUIObjectPropertiesA
winmm
waveInClose
PlaySoundW
comdlg32
dwLBSubclass
version
GetFileVersionInfoW
VerFindFileW
gdiplus
GdipGetImageType
GdipDrawCurve
shell32
ILAppendID
Options_RunDLLA
InternalExtractIconListA
DragQueryFile
msimg32
AlphaBlend
vSetDdrawflag
Sections
.code Size: 939KB - Virtual size: 939KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 436B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE