Static task
static1
Behavioral task
behavioral1
Sample
3691dcaa164a9614d3038d22579c87c0_exe32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
3691dcaa164a9614d3038d22579c87c0_exe32.exe
Resource
win10v2004-20230915-en
General
-
Target
3691dcaa164a9614d3038d22579c87c0_exe32.exe
-
Size
140KB
-
MD5
3691dcaa164a9614d3038d22579c87c0
-
SHA1
e4a18d4e59a152d7c9f86d84cccf5fddea04eb1a
-
SHA256
102934eb9b61e2d950d513c3e40e6991eb24d82666cee6bd3b4add83e92a4173
-
SHA512
ea91cec63a3057022a33002b5f9cb8d64be60a6728834380437959454701e366aba423d6685a66aa5eb064db13b91be236eda0c52d39482746d0c1304211be23
-
SSDEEP
384:90V6KpuYnkD0qdy66MCd2LoU7DmLy9UOUyO6c7aOrF6oEv:6V6KpuYn20qdODwhHUn6c73F6o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3691dcaa164a9614d3038d22579c87c0_exe32.exe
Files
-
3691dcaa164a9614d3038d22579c87c0_exe32.exe.exe windows:4 windows x86
5b78a87d67ffa066abbb0cd3f522e026
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
HeapReAlloc
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
VirtualFree
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetStringTypeW
user32
BeginPaint
GetClientRect
EndPaint
PostQuitMessage
LoadBitmapA
GetDC
ReleaseDC
SetTimer
DefWindowProcA
SendMessageA
LoadIconA
LoadCursorA
RegisterClassA
MessageBoxA
CreateWindowExA
GetWindowLongA
SetWindowLongA
InvalidateRect
SetWindowPos
ShowWindow
UpdateWindow
GetMessageA
DispatchMessageA
TranslateMessage
gdi32
BitBlt
StretchBlt
CreateCompatibleDC
SelectObject
DeleteDC
DeleteObject
GetObjectA
CreateCompatibleBitmap
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ