Static task
static1
Behavioral task
behavioral1
Sample
39040de9f24c8b451c38e2af982e2200.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
39040de9f24c8b451c38e2af982e2200.exe
Resource
win10v2004-20231215-en
General
-
Target
39040de9f24c8b451c38e2af982e2200
-
Size
69KB
-
MD5
39040de9f24c8b451c38e2af982e2200
-
SHA1
d3f8f4e0519f367d7e61ab4166d5d5b1fb7d46b5
-
SHA256
c61b128c3b70e0dacdf24e7aa0e0f5618a45371551b32c164b75e8cdcd37127a
-
SHA512
2e2c0a731884537339fec934fc9da5b49fce5d2e1c771872e2ca3f2590cb36bf0a1773277548a8fc5ccee5c2df11078d0be6e493bee88060313ca98d90217ee6
-
SSDEEP
1536:XI6R+A25yXlzEMi2LZw/pAQjDNcj2elnNP7X8Sm/ZF8otV1B8V:XIkVloKZvQjBcj2ap7X8S8vm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39040de9f24c8b451c38e2af982e2200
Files
-
39040de9f24c8b451c38e2af982e2200.exe windows:4 windows x86 arch:x86
e6616ad4a12b746bffb2272acaa37684
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
CloseHandle
BuildCommDCBA
SetConsoleWindowInfo
GetCommState
GetCommTimeouts
WriteFile
SetConsoleCursorMode
GlobalGetAtomNameA
LockFileEx
GetConsoleOutputCP
EnumSystemLanguageGroupsA
QueueUserWorkItem
CancelIo
FlushConsoleInputBuffer
BackupRead
SetConsoleCtrlHandler
GetConsoleInputWaitHandle
GetStringTypeExA
GetCommandLineA
GetStartupInfoA
ExitProcess
FoldStringA
GetCurrentProcess
SetInformationJobObject
IsDebuggerPresent
GetCommMask
WritePrivateProfileSectionA
CancelWaitableTimer
SetCurrentDirectoryA
Toolhelp32ReadProcessMemory
DosDateTimeToFileTime
GlobalAddAtomA
SetConsoleLocalEUDC
GetCommProperties
GetEnvironmentStringsA
GetPrivateProfileStructA
SetEvent
VerifyConsoleIoHandle
ReadProcessMemory
Sections
WEIJUNLI Size: 4KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.date Size: 46KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ