Static task
static1
Behavioral task
behavioral1
Sample
3e9284ef308e2d99b1596f10eb78d736.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3e9284ef308e2d99b1596f10eb78d736.exe
Resource
win10v2004-20231215-en
General
-
Target
3e9284ef308e2d99b1596f10eb78d736
-
Size
1.1MB
-
MD5
3e9284ef308e2d99b1596f10eb78d736
-
SHA1
8fa9227a8d9779cf62ab8ab57d764297ec770302
-
SHA256
26b380143748af22892c8aada218e7cd6930f8b4956c7ddbae3ee0502f143184
-
SHA512
fa8451bf134546d458e8a1ae339825d9b91c436ca8bb2b4c7198f25094feee9dd9b23f3deeee3cdda68d707b93e0ad30820f3654381ed7f168ee90bc31fb6100
-
SSDEEP
12288:oN5fsnLuxmuKt0VMcBrcb9NUPxXj7AGYv2m3YFXRrSF4zkarOuIHk:E5fdxY0ac6NUP5lYNQX1hvOuIH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e9284ef308e2d99b1596f10eb78d736
Files
-
3e9284ef308e2d99b1596f10eb78d736.exe windows:4 windows x86 arch:x86
07b9c41473231fdd3cc1d051ec13d908
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
UnhandledExceptionFilter
GetCurrentProcess
MultiByteToWideChar
CreateThread
InterlockedDecrement
CreateFileW
lstrlenW
GetProcAddress
LocalFree
InitializeCriticalSection
LeaveCriticalSection
CloseHandle
FreeLibrary
user32
CreateWindowExW
DispatchMessageW
LoadStringW
SendDlgItemMessageW
EndDialog
CharNextW
IsWindow
Sections
.text Size: 198KB - Virtual size: 198KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 352KB - Virtual size: 351KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zlVYO7C5 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Xx6XTCiB Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
o6jyMtut Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 587KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE