Static task
static1
Behavioral task
behavioral1
Sample
3cb84d53e292a310a3a8f30607dd963c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3cb84d53e292a310a3a8f30607dd963c.exe
Resource
win10v2004-20231215-en
General
-
Target
3cb84d53e292a310a3a8f30607dd963c
-
Size
387KB
-
MD5
3cb84d53e292a310a3a8f30607dd963c
-
SHA1
5a7667b02de6b30a87f2e8b5238c6d91bf8a1b45
-
SHA256
6105592fd77c2c6929abad0637639a2d26a3750f2086919bf4d0abf26fd3c0a7
-
SHA512
072fe589103a23243cab9a44b825931be614eeba78adfe76cb5278e46231e032c9852b23d2a539e4eaa4728041950dab576e0e60fdd5ba2fc079415ef1207f68
-
SSDEEP
3072:gayrRceJ0bwE35hum1UyBUqGzJQN6BJqatXcSjWkcegbW3zoI7h+aS1G:WbmZ3XfFBUdtiaJcSikcegbW3zo0naG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cb84d53e292a310a3a8f30607dd963c
Files
-
3cb84d53e292a310a3a8f30607dd963c.exe windows:1 windows x86 arch:x86
a110531a87e9a90a0f8653b00a50f512
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
VariantChangeTypeEx
gdi32
UnrealizeObject
ole32
IsEqualGUID
comctl32
ImageList_SetIconSize
shell32
ShellExecuteA
Sections
CODE Size: 127KB - Virtual size: 376KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE