Static task
static1
Behavioral task
behavioral1
Sample
3f0f5ed550248efe74d546c52d12dfb48efac1f15aca829011d800b9935666bf.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
3f0f5ed550248efe74d546c52d12dfb48efac1f15aca829011d800b9935666bf.exe
Resource
win10v2004-20230220-en
General
-
Target
3f0f5ed550248efe74d546c52d12dfb48efac1f15aca829011d800b9935666bf
-
Size
816KB
-
MD5
3fd5c745c3915781b8779e1d71eb43c9
-
SHA1
1a4f3cee292f18cb22a2778eb95a6e30181f9878
-
SHA256
3f0f5ed550248efe74d546c52d12dfb48efac1f15aca829011d800b9935666bf
-
SHA512
5b13959c2f945a0b881efce163f84dda763d88f399d5589bfa4a76945827f4b6ac418215b05f2fea2a1b1e03be749ba0800eb42c680b522dcda722104b3856dc
-
SSDEEP
24576:gBpwfuaBrdY3b1bc2HycagU8zd/51LRen5T1:SqfuaBruKMPIB1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f0f5ed550248efe74d546c52d12dfb48efac1f15aca829011d800b9935666bf
Files
-
3f0f5ed550248efe74d546c52d12dfb48efac1f15aca829011d800b9935666bf.exe windows x86
15d7bd8ef17ac5476cf86376fb7705bb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
FileTimeToLocalFileTime
Sleep
WaitForMultipleObjects
GetTickCount
SetPriorityClass
GetCurrentProcess
lstrlenA
lstrcatA
GetLastError
ReadFile
GetStdHandle
WriteFile
MoveFileW
DeleteFileW
FreeLibrary
LoadLibraryExA
LoadLibraryA
AreFileApisANSI
LoadLibraryExW
LoadLibraryW
GetModuleFileNameA
GetModuleFileNameW
LocalFree
FormatMessageA
FormatMessageW
SetCurrentDirectoryA
CloseHandle
SetFileTime
CreateFileW
SetLastError
SetFileAttributesA
RemoveDirectoryA
MoveFileA
CreateDirectoryA
DeleteFileA
GetWindowsDirectoryA
GetSystemDirectoryA
GetWindowsDirectoryW
GetSystemDirectoryW
SetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
GetShortPathNameA
GetFullPathNameA
GetCurrentDirectoryA
SetCurrentDirectoryW
GetCurrentDirectoryW
SearchPathA
GetTempPathA
GetTempPathW
GetTempFileNameA
GetTempFileNameW
GetFullPathNameW
SearchPathW
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationA
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FindFirstChangeNotificationW
GetLogicalDriveStringsA
GetLogicalDriveStringsW
GetFileSize
SetFilePointer
GetFileInformationByHandle
SetEndOfFile
CreateFileA
CompareFileTime
FileTimeToSystemTime
EnterCriticalSection
GetModuleHandleW
MultiByteToWideChar
WideCharToMultiByte
VirtualAlloc
VirtualFree
WaitForSingleObject
CreateEventA
SetEvent
ResetEvent
CreateSemaphoreA
ReleaseSemaphore
InitializeCriticalSection
GetVersionExA
UnmapViewOfFile
ExpandEnvironmentStringsW
MapViewOfFile
CreateFileMappingA
GetFileSizeEx
GetCommandLineW
CompareStringW
CompareStringA
GetTimeZoneInformation
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
InitializeCriticalSectionAndSpinCount
InterlockedExchange
GetLocaleInfoA
GetLocaleInfoW
IsValidCodePage
SetEnvironmentVariableA
GetOEMCP
GetACP
GetCPInfo
SetConsoleCtrlHandler
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapDestroy
HeapCreate
HeapReAlloc
FatalAppExitA
ExitProcess
HeapSize
IsDebuggerPresent
TerminateProcess
GetCurrentThread
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoA
GetCommandLineA
CreateThread
GetCurrentThreadId
GetProcAddress
DeleteCriticalSection
ExitThread
HeapFree
HeapAlloc
RtlUnwind
RaiseException
user32
CharPrevExA
MoveWindow
InvalidateRect
SetFocus
CharToOemA
CharLowerW
CharUpperW
CharLowerA
CharUpperA
DialogBoxParamW
CreateDialogParamW
DialogBoxParamA
CreateDialogParamA
GetDialogBaseUnits
SystemParametersInfoA
GetDlgCtrlID
GetWindowLongA
SetWindowLongA
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
SetWindowTextA
CreateWindowExW
RegisterClassW
RegisterClassA
GetWindowTextA
GetWindowTextLengthA
CreateWindowExA
SendMessageW
LoadStringW
LoadStringA
CharPrevA
CharNextA
MessageBoxW
LoadIconA
LoadCursorA
wsprintfA
SetDlgItemTextA
ShowWindow
KillTimer
SetTimer
PostMessageA
ScreenToClient
IsDlgButtonChecked
IsWindow
EndDialog
SendMessageA
GetWindowRect
MapDialogRect
GetDlgItem
SetCursor
gdi32
GetStockObject
shell32
DragFinish
SHGetPathFromIDListA
SHBrowseForFolderA
DragQueryFileA
DragQueryFileW
SHGetMalloc
SHGetFileInfoA
ole32
CoInitialize
CoUninitialize
oleaut32
VariantCopy
SysAllocStringByteLen
VariantClear
SysAllocString
SysFreeString
shlwapi
PathFileExistsW
Sections
.text Size: 247KB - Virtual size: 247KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ