Static task
static1
Behavioral task
behavioral1
Sample
37efa1738b2ac657ef2f6571bce77381.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
37efa1738b2ac657ef2f6571bce77381.exe
Resource
win10v2004-20231222-en
General
-
Target
37efa1738b2ac657ef2f6571bce77381
-
Size
160KB
-
MD5
37efa1738b2ac657ef2f6571bce77381
-
SHA1
e24b1808a4da3d40a95d04c4a43a3941fad25ade
-
SHA256
cb69d29a7cf632e73276fa6ec6d09365454d21190a5230dfd8f366ca572e8aa6
-
SHA512
d4c948fb6bd2997b74ab0c1e80f99c9b4abbb66a70ab67a2c799c13eeef09527a75e161067a6f93ce2de5c7b59a184d1038bd9c8e5a6498942ffac9866170d80
-
SSDEEP
3072:lEbASc9eGBp1/+1NqVi0O/VBnfUXFcSU6FHERGYKg:iUbV/HO/VBnsVxU6cKg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37efa1738b2ac657ef2f6571bce77381
Files
-
37efa1738b2ac657ef2f6571bce77381.exe windows:5 windows x86 arch:x86
32b1db1da1f9514a210f652e1dbfbfe3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetPriorityClass
GetFileTime
CopyFileExA
DeleteFileW
CopyFileExW
GetLocalTime
ExitThread
GlobalFree
GetFileType
FatalExit
GetCommandLineA
WriteFile
CreateDirectoryA
FreeResource
GetStdHandle
GetCPInfo
FindAtomW
DeleteFileA
ReadFile
AddAtomW
FindClose
DeleteAtom
OpenFile
AddAtomA
CopyFileA
FlushFileBuffers
CopyFileA
GlobalFree
FindAtomW
GetPriorityClass
AddAtomW
FlushFileBuffers
WriteFile
ExitThread
GetFileTime
FatalExit
OpenFile
ExitProcess
DeleteFileA
GetPriorityClass
GetLocalTime
FindAtomW
GetStdHandle
OpenFile
CopyFileA
WriteFile
FatalExit
CopyFileExA
FindClose
GetCPInfo
GlobalFree
CreateDirectoryA
GetStdHandle
GetCommandLineA
DeleteFileW
GetFileTime
ExitThread
GetPriorityClass
CopyFileExW
FindClose
CreateDirectoryA
CopyFileA
OpenFile
GetLocalTime
GetLastError
GetCPInfo
OpenFileMappingA
CopyFileExA
DeleteAtom
FreeResource
DeleteFileW
ExitProcess
GlobalFree
GetPriorityClass
FindAtomA
AddAtomA
CopyFileExW
GetStdHandle
GetCommandLineA
ReadFile
FindClose
FindAtomW
CopyFileExW
ReadFile
GetStdHandle
GlobalFree
FatalExit
CopyFileExA
GetCommandLineA
GetLocalTime
OpenFileMappingA
GetFileTime
FindClose
FindAtomW
AddAtomA
GetLastError
CopyFileA
GetFileTime
CopyFileExW
DeleteAtom
GetLocalTime
GetPriorityClass
GetCPInfo
FindAtomA
FindAtomW
ReadFile
GetFileType
AddAtomW
ExitProcess
FreeResource
GetCPInfo
GetCommandLineA
CopyFileExW
FreeResource
DeleteFileW
OpenFile
ReadFile
GlobalFree
FindClose
AddAtomA
GetStdHandle
DeleteFileA
OpenFileMappingA
CreateDirectoryA
CopyFileExA
FindClose
WriteFile
GlobalFree
FreeResource
OpenFile
OpenFileMappingA
FindAtomW
GetLocalTime
AddAtomA
DeleteFileA
GetLastError
DeleteFileW
ReadFile
CopyFileA
AddAtomW
ExitThread
GetCommandLineA
ReadFile
GetCommandLineA
AddAtomA
FindAtomA
FreeResource
CopyFileA
GetLastError
GetStdHandle
GetLocalTime
FatalExit
WriteFile
AddAtomW
DeleteFileW
CreateDirectoryA
CopyFileExW
FindAtomW
DeleteFileA
GetPriorityClass
FindAtomA
CopyFileA
GetLocalTime
DeleteFileW
FlushFileBuffers
CopyFileExA
GetLastError
CreateDirectoryA
DeleteAtom
AddAtomA
user32
EndDialog
DrawIcon
CreateIcon
BeginPaint
InsertMenuA
GetWindowTextA
IsMenu
CopyRect
DrawIconEx
GetDlgItem
DrawTextA
DrawTextW
BlockInput
AlignRects
CloseWindow
GetWindowTextLengthA
GetDC
DialogBoxParamW
IsMenu
GetCursor
AppendMenuA
DrawTextA
BlockInput
GetDC
AppendMenuW
GetWindowTextLengthA
GetWindowTextA
InsertMenuA
CopyRect
DrawIconEx
AlignRects
IsWindow
CloseWindow
DialogBoxParamA
advapi32
RegLoadKeyA
RegDeleteKeyA
RegQueryValueExW
RegEnumValueW
RegOpenKeyExW
RegEnumValueA
RegOpenKeyA
RegQueryValueExA
RegCreateKeyExA
RegDeleteKeyW
RegQueryValueA
RegCreateKeyA
RegEnumKeyW
RegLoadKeyW
RegDeleteValueA
RegReplaceKeyW
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExW
RegDeleteValueW
RegLoadKeyA
RegEnumValueW
RegCreateKeyW
RegOpenKeyExA
RegFlushKey
RegEnumKeyExA
RegQueryValueA
RegQueryInfoKeyA
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyW
RegDeleteKeyW
RegEnumKeyExA
RegCreateKeyExA
RegCreateKeyW
RegEnumValueA
RegReplaceKeyW
RegQueryValueExW
RegReplaceKeyA
RegEnumKeyExW
RegDeleteValueW
RegDeleteValueA
RegQueryInfoKeyW
RegReplaceKeyA
RegQueryValueA
RegOpenKeyW
RegEnumKeyExA
RegEnumKeyA
RegOpenKeyExW
RegEnumKeyW
RegReplaceKeyW
RegGetKeySecurity
RegEnumValueA
RegCreateKeyExW
RegLoadKeyW
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyW
RegCreateKeyA
RegOpenKeyW
RegQueryValueA
RegGetKeySecurity
RegOpenKeyA
RegLoadKeyW
RegEnumKeyA
RegDeleteValueW
RegQueryValueExW
RegEnumKeyExW
RegQueryValueExA
RegQueryValueW
RegCreateKeyA
RegReplaceKeyA
RegCreateKeyW
RegLoadKeyA
RegCreateKeyExW
RegEnumKeyA
RegQueryInfoKeyW
RegGetKeySecurity
RegLoadKeyA
RegOpenKeyW
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyW
RegQueryValueW
RegQueryInfoKeyA
RegReplaceKeyA
RegQueryValueExA
RegOpenKeyExA
Sections
.c4e3 Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edd5d Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.3e3g Size: 108KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c81f Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ