Static task
static1
Behavioral task
behavioral1
Sample
7e68961e0ad1fe19c073e14da82b6282e763acb4340aca71be229262f1768793N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7e68961e0ad1fe19c073e14da82b6282e763acb4340aca71be229262f1768793N.exe
Resource
win10v2004-20241007-en
General
-
Target
7e68961e0ad1fe19c073e14da82b6282e763acb4340aca71be229262f1768793N
-
Size
60KB
-
MD5
1d2b8ca6730f1c24644f46ce80a34620
-
SHA1
d493e846f33c4b1e3f579d5695e974b77a414cc0
-
SHA256
7e68961e0ad1fe19c073e14da82b6282e763acb4340aca71be229262f1768793
-
SHA512
7e3b3a5877941c094589b066529947ca4842c093f2439a581159acba6110b75f9eca9b12da3ba0b41a34267ccd2b12e47a276fa01587b1ab5416bb5b513abc9a
-
SSDEEP
768:HQ2Mrjji69NV+qn/9zZpdkcR5mnZbUQ22Itk:Hb0m8NnLF5mZQ/tk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e68961e0ad1fe19c073e14da82b6282e763acb4340aca71be229262f1768793N
Files
-
7e68961e0ad1fe19c073e14da82b6282e763acb4340aca71be229262f1768793N.exe windows:4 windows x86 arch:x86
92b94f161d43d11b43a28691ed8a9d63
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CreateMutexA
GetLastError
OutputDebugStringA
CloseHandle
LCMapStringW
LCMapStringA
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
RaiseException
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetFilePointer
GetCPInfo
FlushFileBuffers
advapi32
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
msi
ord141
ord204
ord67
ord95
ord144
ord8
ord15
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ