Static task
static1
Behavioral task
behavioral1
Sample
7ef50c41a34c273bb1d3bf1dc24171e9.exe
Resource
win7-20240708-en
General
-
Target
7ef50c41a34c273bb1d3bf1dc24171e9.exe
-
Size
295KB
-
MD5
7ef50c41a34c273bb1d3bf1dc24171e9
-
SHA1
a8dd87683e33014f2c2b4b1c05a7666af7d84c87
-
SHA256
99a78d0fa03ff7a93ac2a006c6c3baebbbc431d0846e24072ed309761a0d4f15
-
SHA512
86a8b671fbe91594e87baf31df187e8e8bb4ac2e05cf478f567ddb2cc87b033d56d29abb9a492f5d533962d3de13e4775bac8ee17fb7ceffa0eef06c566d34b4
-
SSDEEP
6144:plLre6o4BjFptWDDWZ9eGQ0KBbhzvN3RnL:LeMj7eD0EGOzRh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ef50c41a34c273bb1d3bf1dc24171e9.exe
Files
-
7ef50c41a34c273bb1d3bf1dc24171e9.exe.exe windows:5 windows x86 arch:x86
acfdc9990b7411f91ccdf3895980c9d8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumCalendarInfoA
InterlockedIncrement
SetDefaultCommConfigW
SetConsoleScreenBufferSize
GetComputerNameW
GetModuleHandleW
GetProcessHeap
IsBadReadPtr
GetSystemTimes
GlobalAlloc
Sleep
GetFileAttributesA
lstrcpynW
SetTimeZoneInformation
CompareStringW
SetConsoleTitleA
SetCurrentDirectoryA
GetCurrentDirectoryW
GetLongPathNameW
SetLastError
GetProcAddress
GetConsoleDisplayMode
BuildCommDCBW
SetFileApisToOEM
LoadLibraryA
WriteConsoleA
AddAtomW
FindNextChangeNotification
OpenJobObjectW
FindAtomA
FreeEnvironmentStringsW
BuildCommDCBA
PurgeComm
EnumDateFormatsW
SetCalendarInfoA
GetFileInformationByHandle
GetSystemTime
HeapAlloc
ExitProcess
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
GetLastError
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
MultiByteToWideChar
HeapSize
GetLocaleInfoA
SetStdHandle
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
ReadFile
CreateFileA
CloseHandle
user32
SetActiveWindow
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 34.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ