Static task
static1
Behavioral task
behavioral1
Sample
7ab92b270d6c44c8e42161b32db6f9394a99f1394553f988ac5548b1b3eb1488.exe
Resource
win7-20240903-en
General
-
Target
7ab92b270d6c44c8e42161b32db6f9394a99f1394553f988ac5548b1b3eb1488
-
Size
95KB
-
MD5
21db495d7e8660d0c513e84a588a9df0
-
SHA1
724501c5e3253077854d34ecd4633308094f7cf4
-
SHA256
7ab92b270d6c44c8e42161b32db6f9394a99f1394553f988ac5548b1b3eb1488
-
SHA512
630b784582069f0fc5d2928cd6ac47dfb7ab07fd49fa2ef5feb6f24ffd1f4288b7dea563186f9b885171589a59511aa76d261f72c71f456c634a380e275b6b4e
-
SSDEEP
1536:lB+5pLH8o2KYtQQLGpLcO4bOqYuL+C7H5bt/oScKyC2I/XAmZhLBffVaD53uXv6x:lcLw3topQO4bOU7n/o5KyC2czhd1aD5/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ab92b270d6c44c8e42161b32db6f9394a99f1394553f988ac5548b1b3eb1488
Files
-
7ab92b270d6c44c8e42161b32db6f9394a99f1394553f988ac5548b1b3eb1488.exe windows:5 windows x86 arch:x86
f19218e55336dcbbdaa619feefd6c7f1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mfc90u
ord4345
ord1751
ord1754
ord6408
ord3353
ord1675
ord1809
ord1810
ord2208
ord5008
ord5324
ord5167
ord4631
ord5632
ord4000
ord1918
ord2057
ord4043
ord4967
ord589
ord3670
ord4681
ord4905
ord3115
ord6018
ord5663
ord5680
ord4996
ord4347
ord2447
ord5676
ord5674
ord3217
ord2087
ord4213
ord5830
ord6741
ord5548
ord1048
ord4179
ord6035
ord2206
ord2251
ord4747
ord6803
ord4173
ord6801
ord4423
ord4448
ord794
ord1599
ord266
ord3589
ord1248
ord1250
ord1243
ord5767
ord6811
ord265
ord5778
ord6822
ord693
ord965
ord1183
ord3061
ord6355
ord909
ord2537
ord3145
ord1137
ord4543
ord1108
ord595
ord3563
ord3252
ord5664
ord4658
ord1493
ord6411
ord3355
ord2280
ord2595
ord6347
ord4266
ord1938
ord5182
ord744
ord524
ord6311
ord6604
ord1492
ord1533
ord3155
ord4262
ord1688
ord6577
ord1678
ord2364
ord811
ord286
ord436
ord654
ord3528
ord6579
ord4131
ord2597
ord2069
ord2478
ord2081
ord899
ord3185
ord4044
ord5851
ord2694
ord1607
ord6630
ord285
ord3220
ord280
ord933
ord938
ord935
ord6699
ord6693
ord969
ord967
ord971
ord2615
ord2635
ord2619
ord2625
ord2623
ord2621
ord2638
ord2633
ord2617
ord2640
ord2628
ord2610
ord2612
ord2630
ord2375
ord2368
ord1641
ord6802
ord4174
ord6804
ord3682
ord5404
ord6376
ord3226
ord1442
ord5625
ord2139
ord1792
ord1791
ord1727
ord5650
ord2771
ord2983
ord3112
ord4728
ord2966
ord3140
ord2774
ord2893
ord2764
ord4080
ord4081
ord4071
ord2891
ord4348
ord4910
ord4682
ord3515
ord374
ord296
ord813
ord639
ord600
ord4664
ord5602
ord2074
ord5512
ord6800
ord4603
ord5653
ord3743
ord5154
ord4702
ord1728
ord6466
ord5685
ord5683
ord6065
ord960
ord686
ord801
ord1272
msvcr90
_decode_pointer
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
?terminate@@YAXXZ
__CxxFrameHandler3
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_waccess
memcpy
_wtoi
_wtof
wcsrchr
memset
memcpy_s
kernel32
QueryPerformanceCounter
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GetModuleFileNameW
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
GetPrivateProfileSectionW
GetPrivateProfileStringW
WritePrivateProfileSectionW
GetPrivateProfileIntW
user32
GetParent
GetCursorPos
GetSystemMetrics
LoadIconW
ShowCaret
CreateCaret
IsWindowVisible
ScreenToClient
GetClientRect
IsIconic
SendMessageW
DrawIcon
InflateRect
EnableWindow
MessageBeep
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE