Static task
static1
Behavioral task
behavioral1
Sample
035311374cd6bff78976d18a0ea88156.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
035311374cd6bff78976d18a0ea88156.exe
Resource
win10v2004-20231215-en
General
-
Target
035311374cd6bff78976d18a0ea88156
-
Size
10.6MB
-
MD5
035311374cd6bff78976d18a0ea88156
-
SHA1
d20edefa4dc45cb8449466ffa5aeb897f55f7273
-
SHA256
bfef95082c73b147fcb22600a258a8906ffe77929be4bf5c3fdd7f9a8b2bf0bf
-
SHA512
2d5183ab8cdcd3a1bf93e6fc496c1ce272c353c03e00cfed5dd6308ba3752083e87d4d281440874f2bc1afbaa2f059f4f23e014ca799cd738e1e3e7a6ad70a71
-
SSDEEP
3072:XqOl5BVdt9i2yUOaggvjwA0klXmojR2CY:blDv22y7aD0klXr92C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 035311374cd6bff78976d18a0ea88156
Files
-
035311374cd6bff78976d18a0ea88156.exe windows:5 windows x86 arch:x86
da6c526876649585c6fd34c4dc7f1e04
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
ctl3d32
Ctl3dUnregister
Ctl3dEnabled
Ctl3dCtlColor
Ctl3dRegister
Ctl3dGetVer
cryptdll
CDBuildVect
CDLocateRng
MD5Init
user32
GetDlgItemTextW
IsDialogMessageW
SetFocus
LoadCursorA
DrawStateW
InsertMenuA
LoadMenuW
PostMessageA
GetClassLongW
PeekMessageA
IsCharLowerW
advapi32
ReadEventLogA
CryptSignHashA
IsTextUnicode
OpenEventLogA
RegReplaceKeyW
RegOpenKeyW
RegRestoreKeyW
RegSaveKeyA
RegCreateKeyExW
RegLoadKeyW
RegEnumKeyA
RegDeleteValueA
uxtheme
GetThemeSysSize
GetThemeRect
GetThemeInt
GetThemeFilename
EnableTheming
GetThemeSysInt
GetThemeColor
GetThemePosition
GetThemePosition
GetWindowTheme
GetThemeColor
GetThemeSysFont
GetThemeFilename
EnableTheming
GetThemeSysBool
shell32
DllUnregisterServer
ShellAboutW
SHFileOperationW
DragQueryFileA
StrRChrA
SHQueryRecycleBinA
SHGetFileInfoA
DuplicateIcon
StrChrW
SHChangeNotify
StrStrW
FindExecutableA
SHGetDataFromIDListW
SHDefExtractIconA
kernel32
VirtualFree
LoadLibraryA
lstrlen
VirtualAlloc
MoveFileA
LoadLibraryW
CreateJobObjectW
SetCurrentDirectoryW
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 73KB - Virtual size: 73KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10.5MB - Virtual size: 2KB
IMAGE_SCN_MEM_WRITE