Static task
static1
Behavioral task
behavioral1
Sample
3701804c5a85e9771b9af637d364d49f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3701804c5a85e9771b9af637d364d49f.exe
Resource
win10v2004-20231215-en
General
-
Target
3701804c5a85e9771b9af637d364d49f
-
Size
370KB
-
MD5
3701804c5a85e9771b9af637d364d49f
-
SHA1
da28b68a271bde4b7da40c004efc9d9eddcd605d
-
SHA256
5d95de55a045b612210e56cdc7a3015e4fa6227e7137426167ae6c3c71ded48e
-
SHA512
b05953e03beabbf05d63e3df7c529e2d405a0ec8e1e513f10a0763d032f702eafe1f0ce4d4cf2f60f475b5c2968633c7a4e870b4b142127ba5f2089e797d8d9e
-
SSDEEP
6144:YTSmA9zWIJAR7/VAkEQEMu3Z8lss/5PNqSdywIt/ZA8YosI4Lb3oW0tc6DHGc3k/:YGmA9zWj7CEdaZ8j/5P03wMi86v4W0G1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3701804c5a85e9771b9af637d364d49f
Files
-
3701804c5a85e9771b9af637d364d49f.exe windows:4 windows x86 arch:x86
eced9ab29dae078b877dd73ae76939d1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
HeapReAlloc
HeapAlloc
HeapFree
VirtualAlloc
ReadConsoleInputA
OpenFileMappingA
SetFileAttributesA
GetModuleHandleW
GetExitCodeThread
FillConsoleOutputCharacterA
GetPrivateProfileSectionA
FoldStringW
EnumResourceLanguagesW
SetCurrentDirectoryW
GlobalWire
InitAtomTable
GetDiskFreeSpaceA
TerminateThread
HeapDestroy
WriteConsoleOutputAttribute
VirtualProtectEx
FileTimeToLocalFileTime
SetConsoleCP
VirtualQueryEx
WriteConsoleOutputW
lstrlenW
TlsSetValue
SetConsoleActiveScreenBuffer
SetFileAttributesW
LocalReAlloc
OutputDebugStringW
DefineDosDeviceA
GetPrivateProfileIntA
DeleteFileA
DebugActiveProcess
GetNumberFormatA
SetConsoleCursorPosition
GetVersion
IsValidCodePage
GetLongPathNameA
MapViewOfFile
MultiByteToWideChar
WriteFile
ReadConsoleOutputA
GetProcessHeap
SetConsoleMode
OpenEventW
EnumCalendarInfoA
SetEnvironmentVariableW
SetConsoleOutputCP
GetCommandLineA
GetEnvironmentVariableW
FindResourceExA
IsDebuggerPresent
CreateMailslotW
GlobalGetAtomNameW
RemoveDirectoryA
CreateMutexW
HeapSize
WaitForSingleObject
GetWindowsDirectoryW
EnumSystemLocalesA
FindAtomW
LoadLibraryExW
WaitNamedPipeA
DeleteAtom
GetDriveTypeW
GetEnvironmentStringsA
GetStringTypeA
VirtualAllocEx
GetEnvironmentVariableA
LocalFlags
GetMailslotInfo
ReadFileScatter
RtlMoveMemory
GetWindowsDirectoryA
GetAtomNameW
gdi32
GetICMProfileA
MoveToEx
PaintRgn
CreatePolyPolygonRgn
PolyDraw
GetOutlineTextMetricsW
SetTextJustification
GetTextExtentPoint32W
GetRasterizerCaps
SetWorldTransform
FlattenPath
CreateICA
GdiPlayJournal
GetClipBox
CreateMetaFileW
ExtFloodFill
UpdateICMRegKeyW
SetMapMode
GetAspectRatioFilterEx
PolyBezier
PlayMetaFile
CreateScalableFontResourceA
SetDIBits
AbortDoc
ScaleViewportExtEx
EnumFontsA
GetRandomRgn
RestoreDC
Rectangle
SetAbortProc
RealizePalette
OffsetViewportOrgEx
SetBkColor
GetTextFaceW
EnumFontsW
CreateEllipticRgnIndirect
CreateDCW
GetDIBits
SetPixelFormat
RoundRect
DeviceCapabilitiesExW
ResetDCW
GetObjectA
GetCharWidthW
DrawEscape
PlayEnhMetaFileRecord
SetDIBitsToDevice
PolyBezierTo
EnumEnhMetaFile
CloseEnhMetaFile
PolylineTo
CloseMetaFile
PolyPolyline
GetTextCharacterExtra
MaskBlt
EnableEUDC
SetMagicColors
FrameRgn
EnumFontFamiliesW
EnumICMProfilesW
SetViewportExtEx
SetDIBColorTable
CreatePolygonRgn
DeleteDC
CopyMetaFileA
Chord
GetDeviceCaps
GetWindowOrgEx
SetTextColor
SetWinMetaFileBits
SetLayout
AddFontResourceA
GetEnhMetaFileDescriptionA
FillRgn
CreateFontIndirectW
GdiFlush
TranslateCharsetInfo
GetCharacterPlacementW
GetTextCharset
GetCharABCWidthsFloatW
GetTextMetricsA
CreateDIBPatternBrush
GetCurrentObject
GetTextExtentPoint32A
GdiSetBatchLimit
Arc
CreateICW
GetTextExtentExPointW
GetKerningPairsW
SetMiterLimit
CreateDIBitmap
SetBitmapBits
GetCharWidthFloatA
CreateHatchBrush
GetWorldTransform
SetViewportOrgEx
ExtCreatePen
SaveDC
GetBkColor
GetFontData
GdiGetBatchLimit
CopyEnhMetaFileW
GetMetaFileBitsEx
ModifyWorldTransform
GetWindowExtEx
FloodFill
CreatePatternBrush
GetMetaFileA
AngleArc
GetColorAdjustment
LPtoDP
PathToRegion
Pie
CreatePenIndirect
StretchDIBits
ExcludeClipRect
GetSystemPaletteEntries
GetBkMode
SetWindowOrgEx
CheckColorsInGamut
EndDoc
CreateRectRgn
SetPixelV
SetWindowExtEx
GetTextColor
PolyTextOutA
GetNearestColor
GetCharWidthA
GetFontLanguageInfo
ColorMatchToTarget
CreatePalette
GetRegionData
StrokeAndFillPath
SetBkMode
GetTextExtentPointA
SetGraphicsMode
ExtEscape
PatBlt
CreateDCA
GetGraphicsMode
DeleteEnhMetaFile
DescribePixelFormat
RemoveFontResourceA
GetDeviceGammaRamp
AnimatePalette
GetPixel
PtInRegion
ColorCorrectPalette
CreateBitmapIndirect
BitBlt
CreateColorSpaceA
CreateEllipticRgn
SetICMProfileW
ResizePalette
SetMetaFileBitsEx
SetEnhMetaFileBits
GetSystemPaletteUse
StretchBlt
GetICMProfileW
AddFontResourceW
OffsetClipRgn
GetCharWidth32A
gdiPlaySpoolStream
GetMetaRgn
EndPath
CopyMetaFileW
GetCharABCWidthsA
FillPath
InvertRgn
GetTextExtentPointW
IntersectClipRect
BeginPath
SetICMMode
GetNearestPaletteIndex
ResetDCA
Polyline
OffsetRgn
AbortPath
SwapBuffers
LineDDA
SetColorSpace
CreateScalableFontResourceW
EnumFontFamiliesExW
CreateFontW
UpdateColors
CreateCompatibleBitmap
GetBitmapBits
SetPolyFillMode
ScaleWindowExtEx
UpdateICMRegKeyA
SelectObject
GetObjectType
SetColorAdjustment
SetICMProfileA
ExtTextOutW
CopyEnhMetaFileA
GetCharWidthFloatW
GetClipRgn
GetGlyphOutline
CreatePen
GdiPlayDCScript
GetStretchBltMode
CreateDIBSection
CreateRoundRectRgn
GetKerningPairsA
CancelDC
CreateFontA
GetEnhMetaFileBits
GetPolyFillMode
SetRectRgn
GetDIBColorTable
PtVisible
Sections
.text Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ