Static task
static1
Behavioral task
behavioral1
Sample
3c777562996466e1b866fb8fdc8a41c7.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
3c777562996466e1b866fb8fdc8a41c7.exe
Resource
win10v2004-20231215-en
General
-
Target
3c777562996466e1b866fb8fdc8a41c7
-
Size
2.9MB
-
MD5
3c777562996466e1b866fb8fdc8a41c7
-
SHA1
ba0546d9a67bf942bafd48214be846997e33c280
-
SHA256
e6767b6c55faec89cd81da61403086f5cc31fbf5b41adea49003a14d573dbb2e
-
SHA512
217692947dded8ab1efbff31a74327611ccca90467a0ef127c6bf52a5418c52d1a78ccfd8b4a506ccbef9a290baeff2aae82ae2c8507baa004bdf54c24534266
-
SSDEEP
12288:wDDl/K+Qka7Tgk9dBhgCBPql9cWrpKALRJe63fRx8x7b65ysi9hCGW:4DMwaPgkXBuCB29cWrYALR7ZxaaQ/9h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c777562996466e1b866fb8fdc8a41c7
Files
-
3c777562996466e1b866fb8fdc8a41c7.exe windows:4 windows x86 arch:x86
dd1963b0101bdafa197f2f4f6ba9ef16
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Imports
crypt32
CertUnregisterSystemStore
comctl32
CreateToolbarEx
kernel32
CreateSemaphoreW
DeleteTimerQueueEx
GetVolumeNameForVolumeMountPointA
secur32
SaslAcceptSecurityContext
advapi32
CredUnmarshalCredentialW
LsaFreeMemory
LsaOpenSecret
UnregisterIdleTask
ole32
HMETAFILE_UserMarshal
oleaut32
SafeArrayAccessData
VarI1FromDisp
winscard
SCardLocateCardsW
Sections
.data Size: 1024B - Virtual size: 963B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 565B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE