Static task
static1
Behavioral task
behavioral1
Sample
7632be3b34681e0514a69028c939a84c3dfb7bf5899a35aa36f9d753ffa510db.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7632be3b34681e0514a69028c939a84c3dfb7bf5899a35aa36f9d753ffa510db.exe
Resource
win10v2004-20241007-en
General
-
Target
7632be3b34681e0514a69028c939a84c3dfb7bf5899a35aa36f9d753ffa510db.exe
-
Size
117KB
-
MD5
2fb767f4c82b6ce084ad7a5cbc187fbf
-
SHA1
bff4a43a57d4549d7de486256478e6fe1de15e25
-
SHA256
7632be3b34681e0514a69028c939a84c3dfb7bf5899a35aa36f9d753ffa510db
-
SHA512
621aaaceb00d50c8c1593668a528fd7ae228f0a281f42abb43c31a4f87ed529e368251e417204c88a71729bca961a2bbe86f762210a85716070853f49e72454c
-
SSDEEP
3072:y45NEsMZUAM4ZFreMzGPWe5WL1CML4ZFXrTgc7mT:TkIa9KTMLYFXrQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7632be3b34681e0514a69028c939a84c3dfb7bf5899a35aa36f9d753ffa510db.exe
Files
-
7632be3b34681e0514a69028c939a84c3dfb7bf5899a35aa36f9d753ffa510db.exe.exe windows:4 windows x86 arch:x86
4af893d0e0b4d3c1f4d093e273857c14
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleAliasA
InitializeCriticalSection
SetVolumeLabelW
GetStringTypeW
SetCurrentDirectoryA
DeviceIoControl
GetACP
CreateFileMappingW
DeleteFileA
DeleteFileA
GetModuleHandleW
GetStringTypeW
FatalExit
LoadLibraryA
CreateSemaphoreW
GetProcessHeap
SetEnvironmentVariableA
WriteConsoleW
DeleteFileA
VirtualAlloc
CreateMailslotA
GetShortPathNameW
GetConsoleTitleA
mshtml
DllEnumClassObjects
ShowHTMLDialog
ShowModelessHTMLDialog
MatchExactGetIDsOfNames
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avr Size: 1024B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE