Static task
static1
Behavioral task
behavioral1
Sample
c3bf72c3708465099b3783d75b9ece8321d5ee77e895a3357ecf073d7d5a5d0c.exe
Resource
win7-20230831-en
General
-
Target
c3bf72c3708465099b3783d75b9ece8321d5ee77e895a3357ecf073d7d5a5d0c
-
Size
334KB
-
MD5
57bc3605d7877d4b002b08f5887d851b
-
SHA1
6601ab695e47b6e0cb507475c645afb3d1e20325
-
SHA256
c3bf72c3708465099b3783d75b9ece8321d5ee77e895a3357ecf073d7d5a5d0c
-
SHA512
00af24e95f473caee4370e0a267c3d50910ad9e8936462056f5d8ae359f39835d0f451cf5654f91ddbf49aa656d35cbe84465153c6e6d170923286bcab510894
-
SSDEEP
6144:zFH8RIT6Fam1StJ3rXDW49Vl7SkDHPiaODgKYleQ4SIP:zWdGXDzP7aMQP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3bf72c3708465099b3783d75b9ece8321d5ee77e895a3357ecf073d7d5a5d0c
Files
-
c3bf72c3708465099b3783d75b9ece8321d5ee77e895a3357ecf073d7d5a5d0c.exe windows:6 windows x64
ce0c54abf9cb1706cf3f091f1f306b7f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
advapi32
RegCreateKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
RegOpenKeyExW
RegNotifyChangeKeyValue
RegFlushKey
kernel32
EnterCriticalSection
DeleteCriticalSection
GetCommandLineW
lstrlenA
FreeLibrary
WaitForSingleObject
SetEvent
RegisterApplicationRestart
LoadLibraryW
Sleep
CreateEventW
WaitForMultipleObjects
HeapSetInformation
GetCurrentThreadId
CloseHandle
GetVersionExW
GetProcAddress
GetSystemInfo
GetFullPathNameW
WideCharToMultiByte
ReadFile
GetProcessHeap
SetEndOfFile
GetCurrentDirectoryW
VirtualQuery
SetThreadStackGuarantee
VirtualAlloc
VirtualProtect
FlushFileBuffers
SetStdHandle
CreateFileW
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
MultiByteToWideChar
LCMapStringW
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
HeapSize
GetOEMCP
GetACP
GetCPInfo
OutputDebugStringA
RtlCaptureContext
RtlVirtualUnwind
lstrlenW
GetModuleFileNameW
GetFileAttributesW
LeaveCriticalSection
GetSystemDirectoryW
InitializeCriticalSection
WriteConsoleW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
FlsAlloc
GetCommandLineA
GetStartupInfoW
GetLastError
HeapFree
HeapReAlloc
ExitThread
FlsSetValue
FlsGetValue
CreateThread
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
HeapAlloc
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
EncodePointer
DecodePointer
FlsFree
SetLastError
user32
UpdateWindow
SetWindowTextW
DispatchMessageW
EnableWindow
DestroyWindow
SetTimer
GetWindowRect
PostQuitMessage
PostMessageW
KillTimer
MsgWaitForMultipleObjects
GetKeyState
SetForegroundWindow
GetFocus
DialogBoxParamW
CallNextHookEx
IsWindowEnabled
GetWindowLongPtrW
GetClientRect
SetFocus
TranslateMessage
IsDialogMessageW
LoadIconW
GetWindowLongW
PeekMessageW
GetDlgItem
EndDialog
GetDesktopWindow
SetWindowPos
LoadStringW
CheckDlgButton
ShowWindow
CreateDialogParamW
SetWindowsHookExW
AdjustWindowRectEx
UnhookWindowsHookEx
MessageBoxW
SendMessageW
comctl32
ImageList_Create
ImageList_ReplaceIcon
ord17
ImageList_Destroy
comdlg32
GetSaveFileNameW
shell32
ShellExecuteW
ole32
CoUninitialize
CoInitialize
CoInitializeSecurity
CoCreateInstance
oleaut32
SysFreeString
SysAllocString
VariantInit
VariantClear
Sections
.text Size: 288KB - Virtual size: 287KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ