Static task
static1
Behavioral task
behavioral1
Sample
fc3409983019a33bfe879f5307bb7982.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fc3409983019a33bfe879f5307bb7982.exe
Resource
win10v2004-20231215-en
General
-
Target
fc3409983019a33bfe879f5307bb7982
-
Size
8.2MB
-
MD5
fc3409983019a33bfe879f5307bb7982
-
SHA1
4e83b116e7b38708e79eb3d2fcd3d83a29bc6cb0
-
SHA256
8c623e33c6b980d57a52508d2ef57135079a0e47ab87476ef4fb9bd6d0b226a1
-
SHA512
95328335673f26f7c735b206c99d324811e4e71e6b90d8e88b14029ec2ed57a103e34a5fa16db1864a374f7ab2f9c149f4e40915fa63a98393cbd0034717f60f
-
SSDEEP
196608:e3XQZmroFwMOnlFhrpN3m0VNyFabgQjB9tncqtHAcZiL:e3AZm8F7gThrHm0zyFU5jjOwHAMiL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc3409983019a33bfe879f5307bb7982
Files
-
fc3409983019a33bfe879f5307bb7982.exe windows:6 windows x86 arch:x86
9668fa670179965985d6fa17fe7a20d9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
SetFilePointer
GetLastError
GetVersion
DeleteFileW
VirtualAlloc
VirtualFree
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
WaitForSingleObject
CreateEventW
SetEvent
ResetEvent
InitializeCriticalSection
lstrcatW
lstrlenW
GetFileAttributesA
GetFileAttributesW
lstrcpyW
CreateDirectoryW
SetFileAttributesW
GetCurrentThread
FileTimeToSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
Sleep
IsNormalizedString
NormalizeString
GetCurrentDirectoryW
SetCurrentDirectoryW
CreateHardLinkW
RemoveDirectoryW
CreateSymbolicLinkW
GlobalMemoryStatusEx
SetEndOfFile
SetFileTime
CreateFileA
GetDriveTypeW
WriteFile
FlushFileBuffers
GetTickCount
WideCharToMultiByte
FindClose
GetModuleFileNameW
GlobalFree
GetProcAddress
LocalFree
GetModuleHandleW
lstrcmpiW
RaiseException
LoadLibraryExW
InitializeCriticalSectionEx
SetLastError
GetCurrentThreadId
GetUserDefaultLangID
DecodePointer
GetConsoleMode
GetConsoleCP
GetStringTypeW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
SetStdHandle
LCMapStringW
CompareStringW
SetFilePointerEx
GetStdHandle
WriteConsoleW
ExitProcess
GetCommandLineW
GetCommandLineA
GetFileType
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
TlsFree
GetFileSize
CloseHandle
CreateFileW
lstrcpynW
ReadFile
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetSystemDirectoryW
FreeLibrary
LoadLibraryW
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
LoadLibraryExA
IsProcessorFeaturePresent
FlushInstructionCache
IsDebuggerPresent
OutputDebugStringW
EncodePointer
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
GetCurrentProcess
user32
ScreenToClient
GetWindowRect
SystemParametersInfoW
SendMessageW
CreateWindowExW
GetDlgItem
GetWindowTextLengthW
SetFocus
EndDialog
KillTimer
MoveWindow
EnableWindow
SetTimer
SetDlgItemTextW
PostMessageW
MessageBoxW
GetWindow
MonitorFromWindow
GetMonitorInfoW
GetParent
MapWindowPoints
LoadIconW
SetWindowPos
GetWindowLongW
GetWindowTextW
SetWindowLongW
DialogBoxParamW
UnregisterClassW
GetActiveWindow
CharNextW
DispatchMessageW
TranslateMessage
PeekMessageW
RegisterWindowMessageW
SetWindowTextW
InvalidateRect
GetClientRect
gdi32
GetObjectW
GetStockObject
DeleteObject
CreateFontIndirectW
advapi32
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
AreAllAccessesGranted
AccessCheck
OpenThreadToken
RevertToSelf
ImpersonateSelf
GetFileSecurityW
shell32
SHGetPathFromIDListW
SHBrowseForFolderW
CommandLineToArgvW
ole32
CoTaskMemRealloc
CoCreateInstance
CoInitialize
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
oleaut32
VarUI4FromStr
shlwapi
PathIsDirectoryW
Sections
.text Size: 205KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ