Static task
static1
Behavioral task
behavioral1
Sample
3c5a4086283a0854bbc406d94dce3829.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3c5a4086283a0854bbc406d94dce3829.exe
Resource
win10v2004-20231215-en
General
-
Target
3c5a4086283a0854bbc406d94dce3829
-
Size
114KB
-
MD5
3c5a4086283a0854bbc406d94dce3829
-
SHA1
6b1557bdeed82ca1b67d626eaf4d97ec9bd7fe21
-
SHA256
6aeb9b6f9337ad089fe7d0f867d738f777b6bd36eae5f84c98775e7b7b1282b6
-
SHA512
0b0b19574d45e1a6a2c98b12cfae9582895a5d84bb1596eba65f899193485d325252cf13c7952faedfa65afdc5538cb38e62807ee76af458e762d495a58ee4a7
-
SSDEEP
3072:/mDcCW8cWDJt0FnMLhYGJNJTkKW9kJDo:/GT7vVtUWhTlknkDo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c5a4086283a0854bbc406d94dce3829
Files
-
3c5a4086283a0854bbc406d94dce3829.exe windows:4 windows x86 arch:x86
90403c14c08afaa125c4ffd3986391ca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
ClearCommError
CreateDirectoryExA
ExitProcess
FindAtomA
FormatMessageA
GetAtomNameA
GetCommandLineA
GetConsoleCP
GetDriveTypeA
GetHandleInformation
GetModuleHandleA
GetNamedPipeInfo
GetOEMCP
GetPriorityClass
GetProcAddress
GetProfileSectionA
GetShortPathNameA
GetStartupInfoA
GetSystemDirectoryA
GetThreadContext
GetThreadLocale
GetThreadSelectorEntry
GetWindowsDirectoryA
GlobalAlloc
GlobalFix
GlobalFlags
GlobalUnfix
GlobalUnlock
GlobalWire
InitAtomTable
LoadLibraryExA
LocalFlags
LocalReAlloc
LockFile
MapViewOfFileEx
SetFileTime
SetUnhandledExceptionFilter
UnmapViewOfFile
WaitForSingleObjectEx
WritePrivateProfileStructA
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fputs
fread
free
fseek
malloc
memset
rewind
signal
time
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE