Static task
static1
Behavioral task
behavioral1
Sample
3e2a44d8a97b9e2671a630b4859c6b651e5d11e8c63aad83295866bcb4385c7e.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
3e2a44d8a97b9e2671a630b4859c6b651e5d11e8c63aad83295866bcb4385c7e.exe
Resource
win10v2004-20230915-en
General
-
Target
3e2a44d8a97b9e2671a630b4859c6b651e5d11e8c63aad83295866bcb4385c7e
-
Size
5.2MB
-
MD5
030d6fec08f4cce22d7126f591135022
-
SHA1
9edcf47aab62cc6eba2539f1ab9ec51d1dcfa5df
-
SHA256
3e2a44d8a97b9e2671a630b4859c6b651e5d11e8c63aad83295866bcb4385c7e
-
SHA512
c13680f0e1c70d328e77ecf5aed3d4c631a6105c466924e6a4ce1e2a006b35909fa2e51647a7c2af88147cc9025ef4d560f7feb1dba5c59384048ecaeb7069ad
-
SSDEEP
98304:kZsMl+wB9aIVGc5nIXmkq9Y7vl9pg3X7htlBBd8x2KrTABbxjfodvIL:6btB9fVGc5IIY7v749tP8xFrsG0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e2a44d8a97b9e2671a630b4859c6b651e5d11e8c63aad83295866bcb4385c7e
Files
-
3e2a44d8a97b9e2671a630b4859c6b651e5d11e8c63aad83295866bcb4385c7e.exe windows:5 windows x86
1fce4b87564668f6f27cb4e8562b359a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
setsockopt
iphlpapi
IcmpCloseHandle
kernel32
SetEnvironmentVariableA
user32
TranslateMessage
gdi32
EndPage
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
advapi32
RegQueryInfoKeyW
shell32
DragFinish
comctl32
ImageList_Create
shlwapi
PathFindFileNameW
oledlg
OleUIObjectPropertiesW
ole32
CreateBindCtx
oleaut32
SysAllocString
gdiplus
GdipCreateBitmapFromScan0
opencv_core2412
cvCloneImage
opencv_highgui2412
cvSaveImage
opencv_imgproc2412
cvResize
adapthistequalize
ord1
sports
ord2
rscom
ord2
wpcap
pcap_open
libxl
xlCreateBookW
libmysql
mysql_query
usart
usart_recv_ch
gxiapi
ord601
dximageproc
ord1
trackdb
?GetCurPlayerPlace@CGamePlayerRecordsetA@@QAEHXZ
libxml2
xmlDocSetRootElement
winmm
PlaySoundW
msvcrt
strncpy
psapi
GetMappedFileNameW
Sections
.text Size: 4.0MB - Virtual size: 19.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ