Static task
static1
Behavioral task
behavioral1
Sample
34cc2a3f3f5047b7a6fabfe134c10dd2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
34cc2a3f3f5047b7a6fabfe134c10dd2.exe
Resource
win10v2004-20231222-en
General
-
Target
34cc2a3f3f5047b7a6fabfe134c10dd2
-
Size
157KB
-
MD5
34cc2a3f3f5047b7a6fabfe134c10dd2
-
SHA1
480ce6d280054e2e510a940bde09cbc1917d5880
-
SHA256
9a77645eaf7ecb2a33ad184f402bfdcc08ee7a99e56dd753c0ce304f8db7aecf
-
SHA512
48814f8311d2d8e4043fc4fa361e6e88271851b439c3f9f3ebfc5a36b9df49143fafdb13600021fa3e6a558eb2ea4fdf7517075dae0d5cb83b5a936a5ebeae72
-
SSDEEP
3072:eEJLPKoHl8q4Yhs8WAoctXGJZNqvYktXcb202Eh+YlZdQz:H6q4Yhz7tXGHNqvBXcbbR92
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34cc2a3f3f5047b7a6fabfe134c10dd2
Files
-
34cc2a3f3f5047b7a6fabfe134c10dd2.exe windows:4 windows x86 arch:x86
69099a97704c4ae77c1963691259b860
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetCapture
SetMenu
SendMessageA
TranslateMessage
UpdateWindow
ReleaseCapture
RegisterClassExA
PostQuitMessage
MoveWindow
LoadMenuA
LoadIconA
LoadCursorA
GetSystemMetrics
GetSysColor
GetMessageA
EndPaint
DispatchMessageA
DefWindowProcA
CreateWindowExA
ShowWindow
BeginPaint
kernel32
SetLastError
VirtualProtect
Sleep
CreateThread
RtlZeroMemory
LoadLibraryA
GetModuleHandleA
GetLastError
GetCommandLineA
ExitProcess
comctl32
InitCommonControls
CreateStatusWindowA
shell32
ShellAboutA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 151KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ