Static task
static1
Behavioral task
behavioral1
Sample
3c6d2e0c83bccd88fca7383d43b99cc26f2e012cdc65b7cb52cbd2bd87349249.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
3c6d2e0c83bccd88fca7383d43b99cc26f2e012cdc65b7cb52cbd2bd87349249.exe
Resource
win10v2004-20230220-en
General
-
Target
3c6d2e0c83bccd88fca7383d43b99cc26f2e012cdc65b7cb52cbd2bd87349249
-
Size
641KB
-
MD5
27d53269a56a9b71816aae866a4067eb
-
SHA1
7b48e5c715858ba813be4bc4794b31bc85932f48
-
SHA256
3c6d2e0c83bccd88fca7383d43b99cc26f2e012cdc65b7cb52cbd2bd87349249
-
SHA512
10fd4e98f968fc93b7bb7b26ac28c85ba79c2730a1c2226ae9d40aadf7ee43e769af73de284d797f46878dd7319abd73ec6b6b2d12c3cbe6190014d939ba646d
-
SSDEEP
12288:73hjHidxgGeN9wyqW+JgMplBaKSkxS5ylfNnLf8F9xo3LrNPFSnapMqbxDQ:1jKxglCW+JgMpP+kxS5y3nATxodInGLD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c6d2e0c83bccd88fca7383d43b99cc26f2e012cdc65b7cb52cbd2bd87349249
Files
-
3c6d2e0c83bccd88fca7383d43b99cc26f2e012cdc65b7cb52cbd2bd87349249.exe windows x86
a0283cb4aef390a1b88cfe5888124ca6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
accountactivate
ord1
advapi32
AdjustTokenPrivileges
comctl32
ImageList_Create
comdlg32
PrintDlgA
gdi32
SetTextColor
iphlpapi
GetAdaptersInfo
itextout
xeDrawText
kpic10
KPIC_LoadPictureResource
normgrab
CleanupHookDll
ole32
CoTaskMemAlloc
oleaut32
SafeArrayGetElement
oledlg
ord8
olepro32
ord253
psapi
EnumProcessModules
shell32
ExtractIconA
statistics
Statistics_Online
tottsengine50
eTTSFirstVoice
user32
IsDialogMessageA
version
GetFileVersionInfoA
wininet
InternetGetLastResponseInfoA
winmm
PlaySoundA
winspool.drv
DocumentPropertiesA
wsock32
closesocket
xfile
CF_LoadFile
Sections
.text Size: 596KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE