Static task
static1
Behavioral task
behavioral1
Sample
3736fc279dee492c5bdf779e4d3a7f1175f1b749039b2e358e14de99eedefdc6.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
3736fc279dee492c5bdf779e4d3a7f1175f1b749039b2e358e14de99eedefdc6.exe
Resource
win10v2004-20230915-en
General
-
Target
3736fc279dee492c5bdf779e4d3a7f1175f1b749039b2e358e14de99eedefdc6
-
Size
1.3MB
-
MD5
83dc483ca3eb373b31639aa77dbc039d
-
SHA1
84b7d92baa72a0cc05e2e9e8f27f08ed4188a522
-
SHA256
3736fc279dee492c5bdf779e4d3a7f1175f1b749039b2e358e14de99eedefdc6
-
SHA512
7147c3d8d0b822c133b314980c94e0f55d11649116081bdbaf34cf883dd2dff5d6d725bba7d48807ce789d88e047f66d7b296086a58aa6a7446e0724a00f2955
-
SSDEEP
24576:1xtjToCQ5kJOSvtFREM2+lt5ThrD6v+ue6u1:1LToL6JOEHt3Nrwe6u1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3736fc279dee492c5bdf779e4d3a7f1175f1b749039b2e358e14de99eedefdc6
Files
-
3736fc279dee492c5bdf779e4d3a7f1175f1b749039b2e358e14de99eedefdc6.exe windows x86
6ec3e0af9bd2249613fe42285c9d599b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
SetWindowsHookExA
gdi32
GetStockObject
comdlg32
GetSaveFileNameA
winspool.drv
EnumPrintersA
advapi32
RegSetValueA
shell32
ShellExecuteExA
comctl32
ImageList_AddMasked
oledlg
ord8
ole32
CoTaskMemAlloc
olepro32
ord253
oleaut32
SysAllocStringLen
odbc32
ord10
wsock32
closesocket
wininet
InternetGetLastResponseInfoA
imm32
ImmAssociateContext
Sections
.text Size: 1.2MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE