Static task
static1
Behavioral task
behavioral1
Sample
Sublime Text 3 Patch.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Sublime Text 3 Patch.exe
Resource
win10v2004-20230220-en
General
-
Target
Sublime Text 3 Patch.exe
-
Size
45KB
-
MD5
fddf105b8f0614295b42e91e4efc0d24
-
SHA1
f5527f257dfe0dd05bc00da88369ab844819fb7b
-
SHA256
603ee042882f3751bdd34f067d32943aab7fded5405809ab7d1d3f4e9237afeb
-
SHA512
572df5cb1d9fde38d3528384277f13eae923fb7ac687122c5a7a031b6996d7042722d71c86b729ec67ad3573a0107aea4fb4076f7a73b45e5a21820cdd5f966d
-
SSDEEP
768:rlBF3cOTh2/i+EideHoEphIsdIHGKriVl6wcXF/GDEuI3EUcMaRs:ra0gIv7IF/Ga3EHMIs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Sublime Text 3 Patch.exe
Files
-
Sublime Text 3 Patch.exe.exe windows x86
7a767f7973bd174f1461f54bb494c764
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CopyFileW
CreateFileW
CreateFileMappingW
CreateThread
ExitProcess
ExitThread
FindClose
FindFirstFileW
FreeLibrary
GetFileSize
GetFileTime
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetSystemDirectoryW
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryW
MapViewOfFile
ResumeThread
RtlZeroMemory
SetFileAttributesW
SetFileTime
SetThreadPriority
Sleep
SuspendThread
UnmapViewOfFile
WaitForSingleObject
lstrcatW
lstrcpyW
lstrlenA
user32
CallWindowProcW
CheckDlgButton
DialogBoxParamW
DrawTextA
EnableWindow
EndDialog
FillRect
GetDC
GetDlgItem
GetSysColor
GetSysColorBrush
GetWindowLongW
InvalidateRect
IsDlgButtonChecked
LoadCursorW
MessageBeep
MessageBoxIndirectW
ReleaseDC
SendDlgItemMessageW
SendMessageW
SetCursor
SetDlgItemTextW
SetWindowLongW
SetWindowPos
wsprintfW
shell32
ShellExecuteW
ShellExecuteExW
gdi32
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreateFontA
CreateSolidBrush
DeleteDC
DeleteObject
GetObjectW
SelectObject
SetBkMode
SetStretchBltMode
SetTextColor
StretchBlt
gdiplus
GdipCreateBitmapFromStream
GdipCreateHBITMAPFromBitmap
GdipCreateHICONFromBitmap
GdipDeleteGraphics
GdipDisposeImage
GdipGetImageHeight
GdipGetImageWidth
GdiplusShutdown
GdiplusStartup
comctl32
InitCommonControls
comdlg32
GetOpenFileNameW
ole32
CoTaskMemAlloc
CreateStreamOnHGlobal
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ