Static task
static1
Behavioral task
behavioral1
Sample
7e7ae9956e65e5365d3e8cff9819649970fb410f95602690521c27fba4c2ebf4N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7e7ae9956e65e5365d3e8cff9819649970fb410f95602690521c27fba4c2ebf4N.exe
Resource
win10v2004-20241007-en
General
-
Target
7e7ae9956e65e5365d3e8cff9819649970fb410f95602690521c27fba4c2ebf4N.exe
-
Size
208KB
-
MD5
e677025886c82a40d04961cc9b8a7840
-
SHA1
5729414d5c4e31726d48f30c10bb9b0dd9b0c8cf
-
SHA256
7e7ae9956e65e5365d3e8cff9819649970fb410f95602690521c27fba4c2ebf4
-
SHA512
d9042f19e673fa31eb0c9ea128e53a1d4e475c1c9907ae26e5829f060f1def0ec4e53e0b2c3ce95e680b9ac68b500e21f1bf7b008a20cc9eca5f091a4deaf220
-
SSDEEP
6144:mJRDxRqdSqQts6iRZsTZuDbhivDVDN8zqF3:mcjQKUZigDVJ5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e7ae9956e65e5365d3e8cff9819649970fb410f95602690521c27fba4c2ebf4N.exe
Files
-
7e7ae9956e65e5365d3e8cff9819649970fb410f95602690521c27fba4c2ebf4N.exe.exe windows:4 windows x86 arch:x86
91c8557273d46cefa6ad80b57deb236d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindAtomA
SetCalendarInfoA
FindResourceA
lstrcmp
GetDateFormatW
SetCurrentDirectoryA
CopyFileA
DisconnectNamedPipe
LoadLibraryA
SuspendThread
GetProcAddress
user32
PostQuitMessage
SetFocus
RemoveMenu
EnumChildWindows
MessageBoxIndirectW
GetDC
LoadMenuW
GetActiveWindow
LoadMenuA
EnumDesktopWindows
RegisterWindowMessageA
GetWindowTextW
EnumDesktopsW
GetClassNameA
LoadCursorA
GetWindowTextA
GetTopWindow
LoadBitmapA
GetMenuInfo
GetCapture
wvsprintfA
SetCursorPos
IsDlgButtonChecked
GetMenuStringW
CheckMenuRadioItem
DestroyWindow
SetActiveWindow
AppendMenuW
GetDlgItemTextW
UpdateLayeredWindow
IsChild
CreateDialogParamW
GetMenuStringA
ShowCaret
GetKeyState
GetCaretPos
GetCapture
CreateWindowExA
CheckDlgButton
GetIconInfo
CopyImage
WinHelpA
CopyIcon
DialogBoxParamA
GetDC
gdi32
GetGlyphIndicesA
GetColorAdjustment
GetTextCharset
GetTextColor
CreatePen
SetSystemPaletteUse
SwapBuffers
GetICMProfileA
GetFontUnicodeRanges
StartPage
CreateDCA
SetWinMetaFileBits
advapi32
RegCreateKeyExA
RegDeleteKeyW
RegEnumValueA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExW
RegOpenKeyW
shell32
SHGetDataFromIDListA
SHGetFileInfoW
shlwapi
PathRemoveBlanksW
UrlHashA
PathIsDirectoryEmptyW
StrStrNIW
StrCmpNA
PathIsContentTypeA
PathAppendA
PathRemoveBackslashA
PathSkipRootA
PathGetDriveNumberW
PathSearchAndQualifyW
ole32
CoUninitialize
inetcomm
HrGetLastOpenFileDirectory
MimeEditIsSafeToRun
EssSecurityLabelDecodeEx
CreateSMTPTransport
HrDoAttachmentVerb
MimeOleGetDefaultCharset
MimeOleSMimeCapsFull
oledlg
OleUIChangeSourceA
OleUIUpdateLinksW
OleUIConvertW
OleUIObjectPropertiesA
OleUIUpdateLinksA
OleUIBusyA
OleUIPasteSpecialA
OleUIEditLinksW
crypt32
CryptStringToBinaryA
PFXExportCertStore
CertCreateContext
CertGetCRLFromStore
CertFindChainInStore
CertFindAttribute
RegOpenHKCUKeyExU
I_CertUpdateStore
CertGetIntendedKeyUsage
CertDuplicateCRLContext
CryptMsgControl
CryptBinaryToStringA
Sections
.ZYkKE Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.peSRE Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ig Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 381KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.LI Size: 3KB - Virtual size: 481KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 878B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ