Static task
static1
Behavioral task
behavioral1
Sample
3596e0bcd988a7c9a05a467653e2e8bf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3596e0bcd988a7c9a05a467653e2e8bf.exe
Resource
win10v2004-20231215-en
General
-
Target
3596e0bcd988a7c9a05a467653e2e8bf
-
Size
418KB
-
MD5
3596e0bcd988a7c9a05a467653e2e8bf
-
SHA1
c2541ca8b98bf43adc1a16a5fdb9b970ce93dedd
-
SHA256
e1665dc4058d83866026dbe3ce2f24ff2d1f8d9a3019d50e0c4a71cb4fb504e6
-
SHA512
ccedf9239ec107e7966626c87d438e1c18b25eba5fef237fa9e5031150f7c34c23dff063e0988d4be57742c65f5cf47f8942f8dcbbdec88490efb4909cfd2250
-
SSDEEP
6144:SKSx0nhtU5nUajw/QWuf/LYejjqZWkzhLuhRwJesOa9l3x2JkgkIwEk3gCl1/MQH:SKSbBjw/QjjqZWk9UI1wJk2wFQGC3MG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3596e0bcd988a7c9a05a467653e2e8bf
Files
-
3596e0bcd988a7c9a05a467653e2e8bf.exe windows:4 windows x86 arch:x86
b41bd2e35f0417233ecdcc37ef10ef59
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
RegCloseKey
comctl32
CreateMappedBitmap
gdi32
ExtTextOutA
iphlpapi
GetAdaptersInfo
oleaut32
VarUI4FromStr
shell32
SHGetFileInfo
shlwapi
PathStripPathW
user32
LoadMenuA
version
GetFileVersionInfoA
wininet
HttpOpenRequestA
ole32
CLSIDFromString
zlib1
inflate
Sections
.text Size: 388KB - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE