Static task
static1
Behavioral task
behavioral1
Sample
3a129783ee74a77fac18cea8db6eb755.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3a129783ee74a77fac18cea8db6eb755.exe
Resource
win10v2004-20231215-en
General
-
Target
3a129783ee74a77fac18cea8db6eb755
-
Size
148KB
-
MD5
3a129783ee74a77fac18cea8db6eb755
-
SHA1
f6ba22c15192409ea27e6985abac98cdf9522d8c
-
SHA256
9da7d8182ceb8938f167d6daba8c23afd425d85f02a0d6766fb4e8632725fa82
-
SHA512
a92509f70533a707d4c1c9f53b0b8b6a5bf92500a650cacfd349eb2a425aaf3717238e6c1525946a20bc827dd38e495d708ca8d8f51b87d79b6822ab534fecb9
-
SSDEEP
1536:gLNhkQ2lu6b8mleIHLKsNjCRfqgyYKKHsLKMKF6hJDE0mtMwIEvH1y9SL3eL+ggv:gLNbK8gJLgf7nDVF6PUp1Yo3ICg4g38
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a129783ee74a77fac18cea8db6eb755
Files
-
3a129783ee74a77fac18cea8db6eb755.exe windows:6 windows x86 arch:x86
c0e20b21e1b9caef7857d64a3fdea474
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExW
RegCloseKey
RegCreateKeyW
IsTextUnicode
RegSetValueExW
kernel32
GetFileInformationByHandle
FindNLSString
GlobalAlloc
GlobalUnlock
GlobalLock
CreateFileMappingW
GetDateFormatW
GetLocalTime
LocalUnlock
MapViewOfFile
MultiByteToWideChar
UnmapViewOfFile
LocalReAlloc
GetACP
DeleteFileW
SetEndOfFile
LocalLock
FormatMessageW
WideCharToMultiByte
SetLastError
WriteFile
GetLastError
LocalSize
GetFullPathNameW
MulDiv
GetCommandLineW
HeapSetInformation
GetCurrentProcessId
FoldStringW
lstrcmpW
GetFileAttributesW
FindFirstFileW
FindClose
GetTimeFormatW
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
lstrlenW
GetLocaleInfoW
GlobalFree
lstrcmpiW
SetErrorMode
CreateFileW
ReadFile
CloseHandle
LocalAlloc
InterlockedDecrement
LocalFree
InterlockedIncrement
GetUserDefaultUILanguage
UnhandledExceptionFilter
gdi32
SelectObject
SetMapMode
SetViewportExtEx
SetWindowExtEx
LPtoDP
SetBkMode
GetTextMetricsW
SetAbortProc
StartDocW
StartPage
EndPage
AbortDoc
EndDoc
DeleteDC
TextOutW
GetTextExtentPoint32W
CreateDCW
GetTextFaceW
EnumFontsW
GetStockObject
GetObjectW
GetDeviceCaps
CreateFontIndirectW
DeleteObject
user32
GetClientRect
SetCursor
ReleaseDC
GetDC
DialogBoxParamW
SetActiveWindow
GetKeyboardLayout
PostQuitMessage
DefWindowProcW
GetForegroundWindow
IsIconic
DestroyWindow
MessageBeep
GetWindowPlacement
CharUpperW
RegisterClassExW
LoadImageW
LoadCursorW
SetWindowLongW
LoadAcceleratorsW
GetSystemMenu
SetWindowPlacement
CreateWindowExW
RegisterWindowMessageW
SetProcessDPIAware
SetScrollPos
ShowWindow
GetWindowLongW
PeekMessageW
EnableWindow
DrawTextExW
CreateDialogParamW
GetWindowTextW
MoveWindow
InvalidateRect
SendMessageW
CharNextW
CheckMenuItem
CloseClipboard
IsClipboardFormatAvailable
OpenClipboard
GetMenuState
EnableMenuItem
GetSubMenu
GetMenu
SetWinEventHook
GetMessageW
PostMessageW
MessageBoxW
GetFocus
WinHelpW
GetDlgCtrlID
EndDialog
GetWindowTextLengthW
LoadIconW
IsDialogMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
UpdateWindow
UnhookWinEvent
ChildWindowFromPoint
GetDlgItemTextW
SetDlgItemTextW
SetFocus
SetWindowTextW
GetParent
LoadStringW
SendDlgItemMessageW
GetCursorPos
ScreenToClient
msvcrt
?terminate@@YAXXZ
_controlfp
_vsnwprintf
memset
_wtol
memcpy
iswctype
localtime
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_amsg_exit
_initterm
_acmdln
exit
time
__getmainargs
_ismbblead
_XcptFilter
_exit
_cexit
__setusermatherr
comdlg32
GetSaveFileNameW
FindTextW
ReplaceTextW
PageSetupDlgW
PrintDlgExW
GetOpenFileNameW
CommDlgExtendedError
ChooseFontW
GetFileTitleW
shell32
DragAcceptFiles
DragQueryFileW
DragFinish
SHCreateItemFromParsingName
ShellAboutW
winspool.drv
GetPrinterDriverW
ClosePrinter
OpenPrinterW
ole32
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitializeEx
shlwapi
PathIsFileSpecW
SHStrDupW
comctl32
CreateStatusWindowW
ord345
oleaut32
SysAllocString
SysFreeString
ntdll
WinSqmAddToStream
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE