Static task
static1
Behavioral task
behavioral1
Sample
3c5538c433d1384c5df6a2e8f06796b3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3c5538c433d1384c5df6a2e8f06796b3.exe
Resource
win10v2004-20231215-en
General
-
Target
3c5538c433d1384c5df6a2e8f06796b3
-
Size
2.1MB
-
MD5
3c5538c433d1384c5df6a2e8f06796b3
-
SHA1
632a7983ba107eba6467c573eca1be29bf870cd6
-
SHA256
23fe4fe57466a3dc8ee74abc83c0a85db2b1225fd46575d84898ce473463ce6f
-
SHA512
868d5839ffb67032a61534ce9c5e804db85ccafee0a8fec55c113c4399882d61ea7cd8d61f47d5920eeb7d99d0b8a69348e802fae5fb32e6ac9f6e11359cd508
-
SSDEEP
49152:SSptOHj8nKaR/hfXEeoqw0DxIRA/bdH00hyO:lpwHwnKef0diDxIR0dU0r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c5538c433d1384c5df6a2e8f06796b3
Files
-
3c5538c433d1384c5df6a2e8f06796b3.exe windows:4 windows x86 arch:x86
1ab01d2d2234256925bc4f6ba143f5ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__getmainargs
printf
malloc
_snprintf
free
_ismbblead
__setusermatherr
rewind
_onexit
memmove
memcpy
_initterm
_findclose
qsort
__p__fmode
_acmdln
_wcsicmp
__set_app_type
_unlink
_adjust_fdiv
__p__commode
_tolower
_XcptFilter
calloc
_controlfp
_exit
kernel32
FlushFileBuffers
GetEnvironmentStringsW
FormatMessageW
HeapCreate
GetStartupInfoA
GetEnvironmentVariableA
HeapAlloc
IsDebuggerPresent
GetTickCount
GetCurrentProcessId
LoadLibraryA
WriteConsoleA
LCMapStringA
QueryPerformanceCounter
LeaveCriticalSection
FreeLibrary
TerminateProcess
FindClose
RtlUnwind
GetFileType
SetEvent
GetDiskFreeSpaceW
GetVolumePathNameW
WriteFile
GetCurrentThreadId
GetEnvironmentStringsA
lstrlenA
SetEndOfFile
GetProcAddress
GetSystemTimeAsFileTime
IsValidCodePage
GetVersionExA
GetComputerNameW
InterlockedCompareExchange
GlobalLock
VirtualQuery
TlsFree
InterlockedExchange
Sleep
GetConsoleMode
WideCharToMultiByte
CreateFileA
CloseHandle
lstrcmpA
GetModuleHandleA
HeapReAlloc
GetCommandLineW
GetConsoleOutputCP
InterlockedDecrement
InitializeCriticalSection
GetLastError
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
MultiByteToWideChar
GetCurrentThread
VirtualAlloc
HeapFree
GlobalHandle
advapi32
RegCreateKeyExA
SetEntriesInAclW
RegSetValueExA
RegCreateKeyExW
EqualSid
OpenSCManagerW
OpenProcessToken
IsValidSid
CryptDestroyHash
RegQueryValueExW
RegOpenKeyW
SetThreadToken
InitializeSecurityDescriptor
RegCloseKey
RegFlushKey
user32
IsZoomed
KillTimer
IsWindowVisible
RegisterDeviceNotificationW
DeleteMenu
LoadImageW
PostMessageA
GetSystemMetrics
GetDC
CloseClipboard
IntersectRect
SetForegroundWindow
PtInRect
GetClassInfoExA
MessageBoxA
OpenClipboard
ReleaseDC
SetWindowTextW
GetWindowRect
GetKeyState
EnableMenuItem
DrawMenuBar
EndPaint
SetCapture
RegisterClassW
EndDialog
DispatchMessageW
CreateWindowExW
CallNextHookEx
CheckDlgButton
CharNextA
GetNextDlgTabItem
IsIconic
CharNextW
SetWindowLongW
OpenIcon
GetWindowLongW
MsgWaitForMultipleObjectsEx
DestroyMenu
GetScrollPos
GetParent
ScreenToClient
EnableWindow
SetWindowPos
DdeDisconnect
DrawTextW
MessageBoxW
GetSysColor
GetDlgItem
PostMessageW
SetRect
LoadStringA
GetSystemMenu
SetProcessWindowStation
SendMessageA
GetFocus
TranslateMessage
CharUpperA
CreatePopupMenu
ExitWindowsEx
DestroyWindow
UnregisterDeviceNotification
BringWindowToTop
GetClientRect
UpdateWindow
GetWindowTextW
PeekMessageA
CreateDialogIndirectParamW
GetMenuItemCount
oleaut32
VariantClear
SafeArrayPutElement
SafeArrayCreate
SysStringLen
VariantCopyInd
VariantChangeTypeEx
SysAllocStringLen
Sections
.text Size: 200KB - Virtual size: 198KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ