Static task
static1
Behavioral task
behavioral1
Sample
3254acee65ffc4c885ba553df97e7fd5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3254acee65ffc4c885ba553df97e7fd5.exe
Resource
win10v2004-20231215-en
General
-
Target
3254acee65ffc4c885ba553df97e7fd5
-
Size
636KB
-
MD5
3254acee65ffc4c885ba553df97e7fd5
-
SHA1
1c051946071afda6057d17745e80ddbf2d7195c2
-
SHA256
e5829094a18d3f389cbf3331c29609e15d32ab090569f5eb51df1fe3f354d400
-
SHA512
1ddc29418a47fb68f1794a30d2a7a1ffa4f265013770598c6ddebd89ce1ac5e23f6c081107d9ce430bce081374771008d7476ae6549199ff2248515432e90058
-
SSDEEP
12288:T40E3nuWo96luZCOUGMme+xg//0oz5exq6RS9V4P3S+M0yOv:sMWpuZZUjmPS//96RoOvS+MjU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3254acee65ffc4c885ba553df97e7fd5
Files
-
3254acee65ffc4c885ba553df97e7fd5.exe windows:4 windows x86 arch:x86
451a3a8ccf5a07eea3610d87a200e10b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDebuggerPresent
GetProcessVersion
HeapCreate
GetCurrentThread
HeapQueryInformation
GetACP
GetLogicalDrives
CreateIoCompletionPort
VirtualProtect
GetTapeStatus
HeapDestroy
GetEnvironmentStringsA
GetModuleHandleA
GetStdHandle
InterlockedExchange
GetCurrentProcessId
WaitForSingleObject
GetProcessHeap
GetTimeFormatA
GlobalMemoryStatus
LoadLibraryExA
user32
GetDlgItem
GetWindowTextLengthA
FrameRect
GetWindow
DragDetect
ReleaseDC
EndPaint
DrawTextA
GetTitleBarInfo
GetFocus
SetForegroundWindow
GetCursorPos
BeginPaint
wsprintfA
ShowWindow
GetParent
SetActiveWindow
GetClassNameA
FillRect
advapi32
RegCreateKeyA
RegEnumKeyA
RegFlushKey
RegSetValueExA
RegCloseKey
setupapi
SetupCloseLog
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ