Static task
static1
Behavioral task
behavioral1
Sample
3c650c12744093c3af6ccca075476105.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3c650c12744093c3af6ccca075476105.exe
Resource
win10v2004-20231215-en
General
-
Target
3c650c12744093c3af6ccca075476105
-
Size
316KB
-
MD5
3c650c12744093c3af6ccca075476105
-
SHA1
4e7d664342b0a78c239f574eab4fb7c3e0806589
-
SHA256
6667bfb2e02344f51f35d3fda1f98933591c9eaa85eb1bfb86f059d250a9abc8
-
SHA512
74edde06bae7b1c0335f8dd09f397cd32c15ae8adddd726b4d1605c158ae3bdc86a8cc4f2a03ae5a5aa1846321761b24055bc16390f6d481e22b08bfb5d8381d
-
SSDEEP
6144:whgMbyt+/lFO7UXdj5hcD28Ek5k+6GGv+H1wpZnjZr0J/x:whgxtAA70R5uq89H6EHe3pUx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c650c12744093c3af6ccca075476105
Files
-
3c650c12744093c3af6ccca075476105.exe windows:4 windows x86 arch:x86
948da3411bcf9383d2e8abb2da8f709e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThread
HeapCreate
GetACP
GetCurrentProcess
WriteConsoleA
GetStdHandle
GetSystemDirectoryA
GetCompressedFileSizeA
GetEnvironmentStringsA
OpenSemaphoreA
VirtualProtect
FindAtomA
GetModuleHandleA
InterlockedExchange
FormatMessageA
IsDebuggerPresent
FlushFileBuffers
GetCurrentProcessId
GlobalFree
GetExpandedNameA
GetThreadPriority
user32
GetParent
ReleaseDC
SetActiveWindow
BeginPaint
DrawTextA
GetWindow
FrameRect
GetClassNameA
EndPaint
GetFocus
wsprintfA
IsIconic
SetForegroundWindow
FillRect
ValidateRgn
GetCursorPos
GetDlgItem
GetWindowTextLengthA
ShowWindow
linkinfo
GetLinkInfoData
ResolveLinkInfoA
IsValidLinkInfo
DestroyLinkInfo
GetCanonicalPathInfoA
rtutils
LogEventW
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ