Static task
static1
Behavioral task
behavioral1
Sample
3185d3ba65bfb4704b60c4f4446dfa10.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3185d3ba65bfb4704b60c4f4446dfa10.exe
Resource
win10v2004-20231222-en
General
-
Target
3185d3ba65bfb4704b60c4f4446dfa10
-
Size
52KB
-
MD5
3185d3ba65bfb4704b60c4f4446dfa10
-
SHA1
ddbfadd3a2862bed0058ef577f7f8fd45c9c8d9d
-
SHA256
e81b3f5666936c185e5774dc51c9e3bba81fa72ba8b5db043d4e2a05f732710f
-
SHA512
cd3db6a7b4004ac31baad2cafd6305f80352f2098b1eece46d1ce1be1eba1229ee88258fae1a982af58b4f10990b27c1022acd409d34e1d4b0d3958e4b51119c
-
SSDEEP
768:Bjhm6zSmS1h6qyDVYLo9geV0JptaIPXGWgUYg3l:BjrSz6J57+eOJp2a3l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3185d3ba65bfb4704b60c4f4446dfa10
Files
-
3185d3ba65bfb4704b60c4f4446dfa10.exe windows:4 windows x86 arch:x86
9a0a13edd732e583506aec6bace5f5c7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
DisableThreadLibraryCalls
EnumResourceLanguagesW
ExitProcess
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetVersion
HeapAlloc
LoadResource
MultiByteToWideChar
ReadFile
SetLastError
SetUnhandledExceptionFilter
VirtualAlloc
VirtualFree
lstrcpynA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
ntdll
RtlFreeUnicodeString
RtlInitString
RtlInitUnicodeString
RtlLeaveCriticalSection
RtlNtStatusToDosError
RtlUnlockHeap
swprintf
wcsncpy
RtlEnterCriticalSection
RtlFreeSid
rpcrt4
I_UuidCreate
NdrFullPointerQueryPointer
NdrMesTypeAlignSize
NdrNonConformantStringBufferSize
I_RpcTransDatagramFree
NdrServerContextNewUnmarshall
NdrServerInitializeMarshall
NdrVaryingArrayUnmarshall
RpcServerRegisterIfEx
RpcServerTestCancel
RpcServerUseProtseqEpA
char_from_ndr
I_RpcTransDatagramAllocate2
NdrOleAllocate
crtdll
fseek
fputs
cos
_seterrormode
_memicmp
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ