Static task
static1
Behavioral task
behavioral1
Sample
3bc857b77f3f531270ccd73bc1d25c5f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3bc857b77f3f531270ccd73bc1d25c5f.exe
Resource
win10v2004-20231215-en
General
-
Target
3bc857b77f3f531270ccd73bc1d25c5f
-
Size
108KB
-
MD5
3bc857b77f3f531270ccd73bc1d25c5f
-
SHA1
470803ac8620ede30fb65eee6924840162b79e0a
-
SHA256
e9edc6ff9b40d449a61ed02fe5154b97394557b86085cd24429b12f5dd6febab
-
SHA512
fa8992a9ef14d8694c47cb86df6212446c235619d636dda906db72d7e7ab60a1c75ef01cdf91f930e201ff499de97936f25d96661a641ac3ca6c59db53e33bc0
-
SSDEEP
1536:12yOoC202/s6bVhsa2NPnjH91xDADDrpZQiurVn0XvWmv2PyIF/X02Y8HFKAXoVE:12yOH23B5hgxz5nm21FtYCT3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bc857b77f3f531270ccd73bc1d25c5f
Files
-
3bc857b77f3f531270ccd73bc1d25c5f.exe windows:4 windows x86 arch:x86
837ba605694508dd460cf73cdab9dab4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetParent
GetSystemMetrics
TranslateMessage
GetDesktopWindow
CharNextA
gdi32
DeleteObject
SetMapMode
GetStockObject
GetClipBox
PatBlt
SelectObject
SelectPalette
DeleteDC
GetDeviceCaps
GetPixel
SetTextColor
LineTo
GetTextMetricsA
CreatePalette
GetObjectA
SetStretchBltMode
RectVisible
CreatePen
SaveDC
CreateSolidBrush
CreateFontIndirectA
CreateCompatibleDC
SetPixel
SetTextAlign
RestoreDC
kernel32
GetWindowsDirectoryA
lstrlenW
GetThreadLocale
DeleteFileW
GetCurrentProcess
VirtualAlloc
GetACP
GetStartupInfoA
VirtualFree
IsDebuggerPresent
GetUserDefaultLangID
GetVersion
GlobalFindAtomA
DeleteFileA
lstrcmpiA
GetModuleHandleW
MulDiv
RemoveDirectoryA
GetProcessHeap
GetCommandLineA
lstrcmpA
QueryPerformanceCounter
lstrlenA
GetCurrentThreadId
GetCurrentThread
GetOEMCP
SetCurrentDirectoryA
GetModuleHandleA
GetCurrentProcessId
RemoveDirectoryW
GlobalFindAtomW
GetCommandLineW
GetTickCount
lstrcmpiW
CopyFileA
GetDriveTypeA
GetConsoleOutputCP
glu32
gluQuadricCallback
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE