Static task
static1
Behavioral task
behavioral1
Sample
3524fb608df2796b25c6486cffb6ea40.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3524fb608df2796b25c6486cffb6ea40.exe
Resource
win10v2004-20231215-en
General
-
Target
3524fb608df2796b25c6486cffb6ea40
-
Size
62KB
-
MD5
3524fb608df2796b25c6486cffb6ea40
-
SHA1
522658f1e1bebf4373c460cda98d0ca425de1c7d
-
SHA256
7bf0a296ad35cd52ed4f7c7638fd7e3b27f23161753500727e29bc6f4a91dcb3
-
SHA512
68a4d5c5668a9d7cf1e52549d838f53f5bb847a97eb416d676e7f3ed32eaf27374b22fc662c3f9b92dc0ecd3ce8998e3d6f325e1c583a22da9d2b8732c383274
-
SSDEEP
1536:aGPegsVpDKNSf+owoS9Po8TwYwMPtd/BqDIkp:ldCpKM+oGBbw6td/BWv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3524fb608df2796b25c6486cffb6ea40
Files
-
3524fb608df2796b25c6486cffb6ea40.exe windows:5 windows x86 arch:x86
3297f6daf3f7338bfe0a45be886ec9e0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowTextA
FillRect
GetCapture
GetWindowLongA
GetMenuItemCount
GetWindowDC
ChangeMenuA
GetDC
GetClientRect
GetForegroundWindow
SetFocus
GetDlgCtrlID
GetWindow
CheckDlgButton
GetMessagePos
GetSysColorBrush
EndPaint
SetWindowLongW
GetActiveWindow
DragObject
GetParent
ole32
CoCreateInstance
GetHGlobalFromStream
OleSaveToStream
StringFromGUID2
CoSetProxyBlanket
StgCreateDocfileOnILockBytes
OleRegGetUserType
ProgIDFromCLSID
BindMoniker
kernel32
GetExitCodeThread
GetCurrentProcessId
lstrlenW
SetHandleCount
OpenMutexA
IsValidCodePage
ExitProcess
GetOEMCP
IsDBCSLeadByte
lstrcatW
DeleteFileA
GetLastError
VirtualAlloc
FindResourceA
DeleteFileW
GetFileAttributesA
OutputDebugStringA
GetCurrentThreadId
SetUnhandledExceptionFilter
GlobalLock
GetLocalTime
msvcrt
__p__osver
isalpha
wcsrchr
__p__iob
time
__p__commode
rand
_ltow
malloc
swprintf
qsort
__set_app_type
_finite
__setusermatherr
swscanf
wcsncmp
_rotl
srand
atoi
wcsncpy
__wgetmainargs
__p__fmode
_exit
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 26KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 485B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ