Static task
static1
Behavioral task
behavioral1
Sample
3e47ed3c0ede05eaadc6e508aa5f54c5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3e47ed3c0ede05eaadc6e508aa5f54c5.exe
Resource
win10v2004-20231215-en
General
-
Target
3e47ed3c0ede05eaadc6e508aa5f54c5
-
Size
196KB
-
MD5
3e47ed3c0ede05eaadc6e508aa5f54c5
-
SHA1
e14c42eb7e0530908860125bc701c602a1290819
-
SHA256
e13e19c9766a7bde100c590e9928fe2f3a563ef57534b700708c7ec4987f1b63
-
SHA512
4c5c75efa05d7c901c4aee383108a0b94e07785772f169327c5d2a74ac4c40974c0fb71bc134ffe5e21c49f44639556c19810ec9ecd5580a107d5ece3c560353
-
SSDEEP
3072:AL1zo3UAxLnM+M6t0vIiTdSbTcGJtXiJWoZy0KmAbfI6/CNgRoLta6sA+aL6o:XUA9iTQTy/NVoy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e47ed3c0ede05eaadc6e508aa5f54c5
Files
-
3e47ed3c0ede05eaadc6e508aa5f54c5.exe windows:4 windows x86 arch:x86
b6145e3afeb470d81cbe9499bf78f804
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
GetFileTime
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetVersion
FreeLibrary
GetProcessVersion
GetCPInfo
GetOEMCP
RtlUnwind
ExitProcess
TerminateProcess
GetTimeZoneInformation
HeapFree
SetStdHandle
GetFileType
GetACP
RaiseException
HeapReAlloc
HeapSize
GlobalFlags
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStartupInfoA
GetEnvironmentVariableA
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetDriveTypeA
Sleep
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
GlobalUnlock
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
LoadLibraryA
GetProcAddress
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
FindNextFileA
FindFirstFileA
GetLastError
SetLastError
FindClose
InterlockedExchange
LocalFree
lstrcpynA
lstrcpyA
lstrcatA
SetErrorMode
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
HeapCreate
HeapAlloc
HeapDestroy
GetCurrentDirectoryA
GetTempPathA
CopyFileA
GetShortPathNameA
GetFileAttributesA
lstrlenA
WritePrivateProfileStringA
MultiByteToWideChar
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
FindResourceA
SizeofResource
LoadResource
CreateDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
GetCommandLineA
GetModuleHandleA
GetVersionExA
UnhandledExceptionFilter
WinExec
user32
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
LoadIconA
ShowWindow
LoadCursorA
GetSysColorBrush
DestroyMenu
RegisterClassA
GetMenu
GetSubMenu
GetMenuItemID
GetDlgItem
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetTopWindow
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
LoadStringA
GrayStringA
DrawTextA
TabbedTextOutA
ReleaseDC
GetDC
GetMenuItemCount
GetLastActivePopup
IsWindowEnabled
EnableWindow
GetWindowTextA
SetWindowTextA
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetWindowLongA
GetClassNameA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
SetCursor
FindWindowA
PostQuitMessage
GetCapture
WinHelpA
DefWindowProcA
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
SendMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
UnhookWindowsHookEx
GetSystemMetrics
CharUpperA
wsprintfA
PostMessageA
GetClassInfoA
MessageBoxA
gdi32
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetObjectA
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkColor
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
DeleteObject
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
comctl32
ord17
ole32
CoUninitialize
CoInitialize
CoCreateInstance
Sections
.text Size: 120KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ