Static task
static1
Behavioral task
behavioral1
Sample
3ffd178ba8339510fd8024a94be5bdaf719af859435220cf6fc556829d915c63.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
3ffd178ba8339510fd8024a94be5bdaf719af859435220cf6fc556829d915c63.exe
Resource
win10v2004-20230703-en
General
-
Target
3ffd178ba8339510fd8024a94be5bdaf719af859435220cf6fc556829d915c63.exe
-
Size
313KB
-
MD5
4787612302a398f125f19125161d020e
-
SHA1
07b312b82278a6701d7b2e53bb1a72b8c9101cb5
-
SHA256
3ffd178ba8339510fd8024a94be5bdaf719af859435220cf6fc556829d915c63
-
SHA512
f4a97f4416fd8236af110ce6a14ec4396fa36d2d5d04e770f35740241b41639cbb9ee2c2e3046c277d0f5d495b1308bcd836de77e2f01af15ce116b6a603d1e9
-
SSDEEP
3072:ksAdmVBmdgDuzRJPvr72PSjsvApKRdaO/kG5SMyaoXpz6B:0A7AgDARlvOSIvApKbrb5SMy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ffd178ba8339510fd8024a94be5bdaf719af859435220cf6fc556829d915c63.exe
Files
-
3ffd178ba8339510fd8024a94be5bdaf719af859435220cf6fc556829d915c63.exe.exe windows x86
40f5175c04a7e34207ea3837a6e797ac
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
SetDefaultCommConfigA
AllocConsole
DeleteVolumeMountPointA
MoveFileExW
InterlockedDecrement
GetCurrentProcess
GetNamedPipeHandleStateA
HeapFree
GetProfileStringW
SetComputerNameW
FlushConsoleInputBuffer
FreeEnvironmentStringsA
_lclose
_lcreat
GetModuleHandleW
GetConsoleAliasesLengthA
GetCompressedFileSizeW
WaitNamedPipeW
EnumTimeFormatsA
GetDriveTypeA
SetFileShortNameW
LoadLibraryW
ReadConsoleInputA
_hread
GetCalendarInfoA
GetConsoleAliasExesLengthW
GetFileAttributesA
TransactNamedPipe
GetTimeFormatW
GetConsoleAliasW
TerminateProcess
GetOverlappedResult
GetComputerNameA
GetStartupInfoA
GetLastError
IsDBCSLeadByteEx
SetLastError
BackupRead
ReadConsoleOutputCharacterA
GetProcAddress
CreateNamedPipeA
MoveFileW
GlobalGetAtomNameA
OpenWaitableTimerA
InterlockedExchangeAdd
LocalAlloc
BuildCommDCBAndTimeoutsW
GetNumberFormatW
GetCurrentConsoleFont
GetPrivateProfileStructA
GetModuleHandleA
UpdateResourceW
FreeEnvironmentStringsW
FindNextFileW
CreateMailslotA
GetCurrentDirectoryA
EnumDateFormatsW
FatalAppExitA
GetShortPathNameW
OpenSemaphoreW
ReadConsoleInputW
LocalSize
GetWindowsDirectoryW
FindFirstVolumeW
DeleteFileW
CreateFileW
CloseHandle
ReadFile
GetPrivateProfileIntW
GetCommandLineW
InterlockedIncrement
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
MoveFileA
HeapAlloc
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RtlUnwind
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
WriteFile
GetModuleFileNameW
HeapCreate
SetFilePointer
HeapSize
RaiseException
GetModuleFileNameA
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
MultiByteToWideChar
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
LCMapStringW
WriteConsoleW
user32
CharUpperA
CharUpperBuffA
advapi32
ImpersonateSelf
Sections
.text Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 30.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ