Static task
static1
Behavioral task
behavioral1
Sample
3c6887b67c3a4bc3d88a6ce3478cb745.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3c6887b67c3a4bc3d88a6ce3478cb745.exe
Resource
win10v2004-20231215-en
General
-
Target
3c6887b67c3a4bc3d88a6ce3478cb745
-
Size
41KB
-
MD5
3c6887b67c3a4bc3d88a6ce3478cb745
-
SHA1
23717258815bb08dbced4adfe7de3a364bc25996
-
SHA256
57dbab0d9897ee1b4464ab4d459b617dad898c9c9d45586b7177e73b3f64f1f7
-
SHA512
851d009bf43cb9623a81ce03a46c74c3790d4d5efbdc3b0ce2e492249550dd065f6d8fb27c6e3d036a4a85e453d27a97c6a8a37e49d25430783356a2d844b3b6
-
SSDEEP
768:IT5kva0ae5FWc0UHvzug7qYVnj7xRSl2bZ3Yz:muaW5QUHvzugOG9Z3Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c6887b67c3a4bc3d88a6ce3478cb745
Files
-
3c6887b67c3a4bc3d88a6ce3478cb745.exe windows:1 windows x86 arch:x86
61466d37dd5673fbba38c286b756411d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExA
EnumWindows
GetWindowLongA
TranslateAcceleratorA
DeleteMenu
GetWindowThreadProcessId
GetDC
ReleaseDC
CheckMenuItem
GetSubMenu
SetWindowLongA
CheckRadioButton
CreateIconIndirect
SetForegroundWindow
GetScrollInfo
wsprintfA
LoadAcceleratorsA
RegisterClassA
GetDlgItem
LoadImageA
GetWindowPlacement
SetFocus
LoadIconA
EnableMenuItem
GetCursorPos
TrackPopupMenu
CreateDialogParamA
ExitWindowsEx
GetKeyState
GetClassLongA
OffsetRect
GetDoubleClickTime
LoadMenuA
FrameRect
DispatchMessageA
RemoveMenu
SendMessageTimeoutA
DestroyIcon
GetMenuItemCount
AppendMenuA
DialogBoxIndirectParamA
PostMessageA
DrawIconEx
SetUserObjectSecurity
GetDesktopWindow
GetWindowTextA
SetPropA
EmptyClipboard
TrackPopupMenuEx
RegisterClassExA
ClientToScreen
GetWindow
IsDlgButtonChecked
CheckMenuRadioItem
CallWindowProcA
CloseClipboard
LoadStringA
DefMDIChildProcA
EndDialog
SetScrollInfo
GetSysColorBrush
GetSysColor
ChildWindowFromPoint
MoveWindow
DrawTextA
OpenClipboard
GetWindowRect
SetTimer
CreateMenu
IsIconic
GetMenu
LoadCursorA
PtInRect
DrawMenuBar
kernel32
PulseEvent
LCMapStringW
GetSystemInfo
GlobalUnlock
WaitForMultipleObjects
lstrlenW
GetEnvironmentStrings
FileTimeToLocalFileTime
CreateEventA
GetConsoleOutputCP
GetCPInfo
TlsSetValue
GetCommandLineA
GetCurrentThreadId
ExitThread
GetCurrentProcess
WriteConsoleA
SetProcessWorkingSetSize
SetLastError
VirtualQueryEx
FileTimeToSystemTime
ResetEvent
GetProcAddress
GetDateFormatA
GlobalReAlloc
GetStartupInfoA
GetTickCount
SetUnhandledExceptionFilter
SearchPathA
LoadLibraryA
CreateProcessA
Module32First
WriteConsoleW
GetNumberFormatA
ResumeThread
FindClose
GetModuleFileNameA
SetStdHandle
CreateFileA
GlobalLock
GetProcessWorkingSetSize
DuplicateHandle
IsDebuggerPresent
QueryPerformanceFrequency
GetCurrentThread
GetVersion
lstrlenA
VirtualAlloc
GetStdHandle
IsValidCodePage
CreateThread
GetEnvironmentStringsW
SetEndOfFile
SetFilePointer
IsBadReadPtr
FlushFileBuffers
InterlockedIncrement
ExitProcess
SetEnvironmentVariableA
GetStringTypeA
lstrcpynA
GetFileTime
GetProcessAffinityMask
GetFileAttributesA
HeapSize
OpenEventA
QueryPerformanceCounter
GetModuleHandleA
FormatMessageA
GetDriveTypeA
VirtualFree
gdi32
SetBkMode
SetBkColor
LineTo
EndPage
CreateFontIndirectA
GetBkColor
GetBkMode
CreateSolidBrush
StartDocA
SelectObject
RestoreDC
MoveToEx
GetStockObject
SetROP2
CreateCompatibleDC
CreatePen
SaveDC
GetTextExtentPoint32A
RectInRegion
CreateDIBSection
SetMapMode
SetTextColor
StartPage
Polyline
SelectClipRgn
CreateCompatibleBitmap
SetTextAlign
CreateRectRgn
DeleteDC
GetObjectA
GetTextMetricsA
CreateRectRgnIndirect
Rectangle
msvcrt
_wcsrev
_getws
_setsystime
_mbsinc
_XcptFilter
_ftol
__p__commode
_winmajor
_inp
_adjust_fdiv
_gmtime64
_vscwprintf
__getmainargs
difftime
_mbcjistojms
_acmdln
_gcvt
_cputs
__setusermatherr
_pctype
_except_handler3
strncat
_ismbclegal
_ungetwch
realloc
_findnext64
wprintf
_strset
exit
_cscanf
_ismbbkana
_snprintf
__set_app_type
memcpy
_vsnwprintf
_ismbstrail
_aligned_realloc
wcscspn
_itoa
strstr
wscanf
_putw
_ungetch
wcscpy
_mbsnbicmp
_splitpath
_outpw
_adj_fptan
feof
_creat
_exit
_lfind
_fputchar
_wctime64
_stat64
_mkdir
_lseeki64
isgraph
_initterm
_pwctype
_rotl
_atodbl
rand
_pipe
_wcserror
_mbschr
_wsopen
isdigit
_vscprintf
abs
vfprintf
_mbsnbcat
setlocale
_safe_fdiv
_controlfp
perror
memmove
_mktemp
_scprintf
__p__fmode
_mbsdup
_beep
_spawnvpe
_mbsnbicoll
_findfirst64
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ