Static task
static1
Behavioral task
behavioral1
Sample
bc3725c3ccead94e325301bd8fb8029d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
bc3725c3ccead94e325301bd8fb8029d.exe
Resource
win10v2004-20231215-en
General
-
Target
bc3725c3ccead94e325301bd8fb8029d
-
Size
234KB
-
MD5
bc3725c3ccead94e325301bd8fb8029d
-
SHA1
816af4c22199e1a384f9c17eb34da96c0cf4555b
-
SHA256
6edf7c043348efe02d94c97a4d06ec735fb90a77ea290509e03991edadb24716
-
SHA512
eea193fb9d72fa2f9b8bc42287eac754132ca81789ef25fdde22f922a8081eb95fcdda4ebe8c57b06b96b42b17abc5c3fb119598ce27e12f69c0514e464a7ddb
-
SSDEEP
3072:AesSz8alCzBz1vBEN73yptw1cnYb72xj5FAXu9j8:AnB9x4ixjAe+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc3725c3ccead94e325301bd8fb8029d
Files
-
bc3725c3ccead94e325301bd8fb8029d.exe windows:5 windows x86 arch:x86
bc49d6ab56cfb486ceb4213f859ac301
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushFileBuffers
GetLastError
GetModuleFileNameA
CloseHandle
DeleteFileW
SetFileAttributesW
CreateThread
SetFilePointer
MapViewOfFile
UnmapViewOfFile
SetEndOfFile
CreateFileMappingW
GetTickCount
GetWindowsDirectoryW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateFileW
CompareStringW
CompareStringA
GetConsoleCP
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
RtlUnwind
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetModuleFileNameW
ReadFile
CopyFileW
WideCharToMultiByte
WriteFile
CreateProcessW
GetFileSize
GetEnvironmentVariableW
GetCommandLineW
GetVolumeInformationW
ExitProcess
FindNextFileW
FindClose
MultiByteToWideChar
Sleep
GetLogicalDrives
SetEnvironmentVariableA
FindFirstFileW
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
SetStdHandle
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetConsoleMode
GetCommandLineA
GetStartupInfoA
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
RaiseException
GetTimeZoneInformation
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
GetStdHandle
CreateFileA
FreeEnvironmentStringsA
user32
GetClientRect
CharUpperBuffW
GetSystemMetrics
LoadBitmapW
SetWindowPos
EndDialog
GetDlgItem
EndPaint
SetTimer
GetWindowRect
DrawTextA
DialogBoxParamW
GetWindowInfo
InvalidateRect
SendMessageA
BeginPaint
SetRect
MessageBoxA
CharToOemA
gdi32
SetTextColor
DeleteDC
SetBkColor
SelectObject
CreateCompatibleDC
CreateFontW
GetObjectW
CreateSolidBrush
TextOutA
BitBlt
advapi32
RegCloseKey
RegFlushKey
RegDeleteValueW
RegCreateKeyExA
RegQueryValueExW
RegSetValueExW
wininet
InternetConnectA
InternetReadFile
HttpOpenRequestA
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
HttpSendRequestA
Sections
.text Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ