Static task
static1
Behavioral task
behavioral1
Sample
38f36232db02bc5c44c2611188ff0098.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
38f36232db02bc5c44c2611188ff0098.exe
Resource
win10v2004-20231215-en
General
-
Target
38f36232db02bc5c44c2611188ff0098
-
Size
392KB
-
MD5
38f36232db02bc5c44c2611188ff0098
-
SHA1
06a89c19c3626492383726fad3e5dac3f84053d0
-
SHA256
603f009ad09921267094d868f032bc6ff758df9b6bdceb5de5d5d8a88be573bb
-
SHA512
dd6a9a53fab577d50c35ff9225a61263bd1488abe4eac31a13383193ca2896909cfd73841f7344dc716373c8e8adae4e7da0c13a61aa10e9fb6006fee2ccea27
-
SSDEEP
6144:RojAPQrHMHhzBQi5Z8zw11i0eAmQm+91SlDnmeTYlpyqqHimIaEAMzl95h:RNQrU/1uAmQvmmOqEhIaAzr5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38f36232db02bc5c44c2611188ff0098
Files
-
38f36232db02bc5c44c2611188ff0098.exe windows:4 windows x86 arch:x86
e321484cab2d4322dcffae2163039102
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
InternalExtractIconListA
comctl32
CreateMappedBitmap
CreateUpDownControl
DestroyPropertySheetPage
CreateStatusWindowW
ImageList_AddMasked
ImageList_DrawEx
ImageList_SetIconSize
ImageList_Draw
InitMUILanguage
ImageList_SetFilter
GetEffectiveClientRect
ImageList_GetIcon
ImageList_ReplaceIcon
CreatePropertySheetPageA
ImageList_Add
ImageList_Destroy
CreateToolbarEx
CreateStatusWindow
InitCommonControlsEx
ImageList_Copy
ImageList_SetDragCursorImage
ImageList_GetBkColor
kernel32
GetCurrentProcess
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
CreateSemaphoreA
LCMapStringW
GetLocaleInfoW
SetPriorityClass
SetFileAttributesW
InterlockedIncrement
InitializeCriticalSection
GetSystemTime
GetModuleFileNameW
GetModuleFileNameA
HeapCreate
QueryPerformanceCounter
ReadFile
SetStdHandle
SetConsoleScreenBufferSize
CompareStringW
GetDateFormatA
GetEnvironmentVariableA
WideCharToMultiByte
SetFilePointer
GetModuleHandleA
GetStartupInfoA
GetVersion
TlsFree
CloseHandle
GetEnvironmentStringsW
lstrlen
GetSystemTimeAsFileTime
GetStringTypeA
FillConsoleOutputCharacterA
GetStartupInfoW
WriteFile
SetEnvironmentVariableA
SetConsoleCP
OpenMutexA
ExitProcess
GetFileType
GetCommandLineA
FreeEnvironmentStringsA
GetFileTime
LCMapStringA
ExpandEnvironmentStringsW
VirtualFree
DebugBreak
UnhandledExceptionFilter
GetCommandLineW
InterlockedDecrement
HeapReAlloc
FlushFileBuffers
GetLocalTime
GetDriveTypeA
RtlUnwind
GetProcAddress
MultiByteToWideChar
EnumCalendarInfoExW
CompareStringA
GlobalFlags
FreeEnvironmentStringsW
IsBadWritePtr
HeapFree
GetDiskFreeSpaceExA
EnumCalendarInfoExA
GetEnvironmentStrings
SetEndOfFile
AllocConsole
GetTickCount
GetLastError
LoadLibraryA
GetCPInfo
GetSystemTimeAdjustment
GetCurrentProcessId
EnumResourceNamesA
HeapDestroy
SetCurrentDirectoryW
HeapAlloc
TlsAlloc
WriteConsoleOutputCharacterA
ReadFileEx
TlsSetValue
GetTimeZoneInformation
VirtualAlloc
DeleteCriticalSection
SetHandleCount
VirtualQuery
SetLastError
InterlockedExchange
CreateMutexA
UnlockFileEx
GetCurrentThreadId
GetCurrentThread
TlsGetValue
TerminateProcess
GetStdHandle
CreatePipe
user32
ReleaseCapture
GetWindowContextHelpId
DefDlgProcW
GetMenu
DestroyIcon
DdeSetUserHandle
DestroyCursor
GetWindowTextW
SetMessageExtraInfo
InternalGetWindowText
EnumWindowStationsA
SwitchDesktop
CloseDesktop
OpenDesktopA
ExcludeUpdateRgn
CreateMDIWindowW
DialogBoxParamA
IsCharAlphaW
InSendMessageEx
DrawMenuBar
GetThreadDesktop
ReleaseDC
SystemParametersInfoA
SetScrollRange
DrawIconEx
SetDlgItemTextA
HideCaret
DialogBoxIndirectParamA
RegisterDeviceNotificationA
MessageBeep
SetWindowLongW
FindWindowW
MapVirtualKeyExA
GetSystemMenu
CopyAcceleratorTableW
GetTitleBarInfo
IsMenu
ToAsciiEx
LoadCursorFromFileW
RegisterClassExA
SetDlgItemTextW
CharNextW
DrawEdge
RegisterClassA
ActivateKeyboardLayout
UnhookWindowsHook
CharUpperA
GetKeyboardLayoutNameW
OemToCharA
DdeCmpStringHandles
GetDialogBaseUnits
RegisterClipboardFormatW
Sections
.text Size: 172KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ