Static task
static1
Behavioral task
behavioral1
Sample
3ab5cdcb6d8a0b050d3f75967e90fc0d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ab5cdcb6d8a0b050d3f75967e90fc0d.exe
Resource
win10v2004-20231222-en
General
-
Target
3ab5cdcb6d8a0b050d3f75967e90fc0d
-
Size
42KB
-
MD5
3ab5cdcb6d8a0b050d3f75967e90fc0d
-
SHA1
46e2d3b683d855093347ced909a265eb5bfec125
-
SHA256
7cad5ff2ca6012b09bde895d6aa48223f8cacd9a9a5ba6bd493a18f74062938d
-
SHA512
8883feb169065bf4af526a5f35512ca1bb325ea3024937f6ae38f0f630d30f4bf9efb4e7c5529e1d56553068415cc3cb32c4679b93388accc96a42845ba43f15
-
SSDEEP
192:gaAB3EkYl0zxgGoFKvJuD0ABh19fQN6eT/ermT+W6lBbNirOEiwXW3X3UQ:gDCbG+0A5ZFO/erZfQrOEioyX3UQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ab5cdcb6d8a0b050d3f75967e90fc0d
Files
-
3ab5cdcb6d8a0b050d3f75967e90fc0d.exe windows:4 windows x86 arch:x86
85773a17eac8d4a521b00d2cca9b9ac3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
GetDC
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 340B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ