Static task
static1
Behavioral task
behavioral1
Sample
7a392492b4e488a7bc2d0be41a135081d0529877a3ac76d4832fd12cc5b982c4.exe
Resource
win7-20240903-en
General
-
Target
7a392492b4e488a7bc2d0be41a135081d0529877a3ac76d4832fd12cc5b982c4
-
Size
77KB
-
MD5
8f572f08e35a886078f6a3c97eaa9130
-
SHA1
82bf02be182f81832164b42f387607cdcd20abe0
-
SHA256
7a392492b4e488a7bc2d0be41a135081d0529877a3ac76d4832fd12cc5b982c4
-
SHA512
dad129ab3a1e650cee5d3b13ba3189cdc44d880d138b6345710e003aa585e3db51f8ecf88246f36a6ce40c4795d5ff1fccea56332d197daf8d3f3ace81a5803a
-
SSDEEP
1536:PL2hIZA4fFfgK6xwHquw63wIl3eCEwWsg1X:PLnFYZx7CeCEwrk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a392492b4e488a7bc2d0be41a135081d0529877a3ac76d4832fd12cc5b982c4
Files
-
7a392492b4e488a7bc2d0be41a135081d0529877a3ac76d4832fd12cc5b982c4.exe windows:5 windows x86 arch:x86
b892955ae494fe908bdf52e81e1dfa4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersAddresses
Sections
VDHDOJDO Size: - Virtual size: 160KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VDHDOJDO Size: 76KB - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE