Static task
static1
Behavioral task
behavioral1
Sample
3bacd29e7a9e6c8c7ad4a99d80f291a5c8db461cfc7e93c4ee14600b22a8a5a1.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
3bacd29e7a9e6c8c7ad4a99d80f291a5c8db461cfc7e93c4ee14600b22a8a5a1.exe
Resource
win10v2004-20230915-en
General
-
Target
3bacd29e7a9e6c8c7ad4a99d80f291a5c8db461cfc7e93c4ee14600b22a8a5a1
-
Size
1.0MB
-
MD5
293e1b6610c745aff4af45eb36a5ea9b
-
SHA1
c0965ef94527f74ee8c97a847ba3895488fbed4d
-
SHA256
3bacd29e7a9e6c8c7ad4a99d80f291a5c8db461cfc7e93c4ee14600b22a8a5a1
-
SHA512
88da27f5892b106cf735b21e3ec09c921f57e7c4f4e0c161ec350eaa84b4d1774986bb8e0cd85892937a97a059ff7aab73559e6186b2ac36bdfd60e6708d056e
-
SSDEEP
24576:eVcofRLSLMWAYuJVNsEUvWaxB011e0Zk+7qCfVmM9s3zJHfv:eJZsRAYuJVGxB0111t7FsFH3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bacd29e7a9e6c8c7ad4a99d80f291a5c8db461cfc7e93c4ee14600b22a8a5a1
Files
-
3bacd29e7a9e6c8c7ad4a99d80f291a5c8db461cfc7e93c4ee14600b22a8a5a1.exe windows:6 windows x86
a60e389beb82656a5dcc6ce923a563b1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
ws2_32
WSASend
closesocket
WSAGetLastError
ioctlsocket
recv
send
connect
WSAGetOverlappedResult
getsockopt
htonl
WSASetLastError
getpeername
select
WSAIoctl
WSARecv
WSAStartup
setsockopt
accept
listen
sendto
bind
socket
recvfrom
getsockname
kernel32
HeapSize
GetProcessHeap
GetStringTypeW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetEnvironmentVariableA
MultiByteToWideChar
GetSystemFirmwareTable
ReadFile
GetFileSizeEx
WriteFile
GetUserDefaultUILanguage
CreateFileW
GetLastError
CreateFileA
DeleteFileA
CloseHandle
GetSystemInfo
SetFilePointerEx
FindFirstFileA
LoadLibraryExA
GetModuleFileNameW
FindNextFileA
CreateMutexA
GetFileAttributesW
SetDllDirectoryA
LoadLibraryA
GetCurrentDirectoryW
SetCurrentDirectoryW
GetProcAddress
FreeLibrary
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
DeleteCriticalSection
WriteConsoleW
ResetEvent
WaitForSingleObject
CreateEventA
GetCurrentThreadId
GetTickCount
UnmapViewOfFile
GetSystemDirectoryA
LocalAlloc
LocalFree
FormatMessageA
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimeAsFileTime
Sleep
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
ReleaseSemaphore
CreateSemaphoreA
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
SetEndOfFile
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
HeapAlloc
LCMapStringW
CompareStringW
SetEvent
GetTimeFormatW
GetDateFormatW
HeapFree
GetStdHandle
FreeLibraryAndExitThread
ResumeThread
ExitThread
DecodePointer
CreateThread
SetConsoleCtrlHandler
GetModuleHandleExW
ExitProcess
ReadConsoleW
GetConsoleMode
SetStdHandle
GetCommandLineW
GetCommandLineA
GetFileType
RaiseException
VirtualProtect
VirtualQuery
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetTimeZoneInformation
user32
EnableWindow
GetCursorPos
SetForegroundWindow
DialogBoxParamW
PostQuitMessage
AppendMenuW
GetDlgItem
LoadIconW
DestroyMenu
SetWindowTextA
ShowWindow
TrackPopupMenu
CreatePopupMenu
SetWindowTextW
EndDialog
MessageBoxW
SendMessageW
Sections
.text Size: 600KB - Virtual size: 600KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 240KB - Virtual size: 239KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ