Static task
static1
Behavioral task
behavioral1
Sample
38a2f60e8d70a70f398c230a04d616dd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
38a2f60e8d70a70f398c230a04d616dd.exe
Resource
win10v2004-20231215-en
General
-
Target
38a2f60e8d70a70f398c230a04d616dd
-
Size
535KB
-
MD5
38a2f60e8d70a70f398c230a04d616dd
-
SHA1
73bce7befbba4fd020e3327c30af10047cd40184
-
SHA256
33e5946509d5d5758ff3795f4007f3526e010600924b390f9baf746b738b6af1
-
SHA512
9861f11effd0f9f8823ffbd2aecb0e4c9f78455332a4ea9fa371b15c9bf2ff67067d8e0e5aef93430a08a43b2380674250f1636f5a2d74108f58cafefe0cd6c0
-
SSDEEP
6144:FiHXuZSjFDLhRis0iLmgt/i97NiNGKjtag6pAOQYipgn/C7Urctpxnb4EhuZ8pSR:FiH+ZSpD1KgtaHiGKsB3/CwrQPn8o3N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38a2f60e8d70a70f398c230a04d616dd
Files
-
38a2f60e8d70a70f398c230a04d616dd.exe windows:4 windows x86 arch:x86
7836f375324ec3035fa961cf23218800
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CopyRect
CharPrevA
SendNotifyMessageW
RegisterClassA
SwapMouseButton
EnumDisplayDevicesA
SetActiveWindow
DestroyWindow
GetMonitorInfoA
CharUpperBuffW
GetDesktopWindow
ShowWindow
RegisterClassExA
DlgDirListComboBoxW
EnumDisplaySettingsW
DdeInitializeA
AdjustWindowRectEx
SetProcessWindowStation
DefWindowProcW
ScreenToClient
SetSystemCursor
InflateRect
GetMessagePos
CreateWindowExW
MessageBoxW
MonitorFromRect
advapi32
ReportEventA
RegOpenKeyW
CryptCreateHash
CryptEnumProvidersW
RegQueryInfoKeyA
CryptSetHashParam
LookupPrivilegeValueA
wininet
FindFirstUrlCacheEntryExA
InternetAlgIdToStringA
shell32
SHBrowseForFolderA
ShellAboutA
DragFinish
comctl32
ImageList_BeginDrag
CreateUpDownControl
CreatePropertySheetPage
ImageList_GetBkColor
ImageList_DragMove
InitCommonControlsEx
ImageList_LoadImage
_TrackMouseEvent
ImageList_DrawEx
ImageList_Copy
ImageList_GetImageInfo
ImageList_LoadImageW
ImageList_SetOverlayImage
ImageList_Add
ImageList_Create
ImageList_Write
CreatePropertySheetPageA
kernel32
GetUserDefaultLCID
CompareStringA
CompareStringW
FlushFileBuffers
ExpandEnvironmentStringsW
GetLocaleInfoW
HeapAlloc
GetCommandLineA
InitializeCriticalSection
GetCurrentThread
GetDateFormatA
GetCurrentThreadId
DeleteCriticalSection
EnterCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStrings
GetLocaleInfoA
GetStringTypeA
DebugBreak
GetStartupInfoA
TlsAlloc
ReadFile
HeapCreate
HeapFree
TlsGetValue
GetStringTypeW
SetFilePointer
VirtualProtect
GetTimeZoneInformation
HeapReAlloc
OpenMutexA
GetSystemInfo
GetModuleHandleA
UnhandledExceptionFilter
SetStdHandle
GlobalHandle
GetOEMCP
GetTimeFormatA
GetCurrentProcess
InterlockedExchange
CreateThread
RtlUnwind
GetCurrentProcessId
HeapDestroy
GetCPInfo
SetLastError
GetModuleFileNameA
GetSystemTimeAsFileTime
GetEnvironmentStringsW
VirtualQuery
MultiByteToWideChar
GetFileType
FreeEnvironmentStringsA
GetCommandLineW
SetHandleCount
CloseHandle
WriteFile
LoadLibraryA
GetLastError
EnumSystemLocalesA
ExitProcess
TerminateProcess
QueryPerformanceCounter
LCMapStringW
GetModuleFileNameW
WideCharToMultiByte
SetEnvironmentVariableA
LCMapStringA
GetProcAddress
VirtualAlloc
ResumeThread
GetStdHandle
CreateWaitableTimerA
GetVersionExA
TlsFree
LeaveCriticalSection
TlsSetValue
VirtualFree
HeapSize
GetACP
GetStartupInfoW
IsValidLocale
IsBadWritePtr
GetTickCount
SetConsoleCursorInfo
IsValidCodePage
GetSystemTimeAdjustment
CreateMutexA
Sections
.text Size: 380KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ