Static task
static1
Behavioral task
behavioral1
Sample
3939d2b464a1608ba380ccf5311b5af8.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3939d2b464a1608ba380ccf5311b5af8.exe
Resource
win10v2004-20231215-en
General
-
Target
3939d2b464a1608ba380ccf5311b5af8
-
Size
75KB
-
MD5
3939d2b464a1608ba380ccf5311b5af8
-
SHA1
6b9601d1c3ce9662d0fd9087af0750aa3fd01825
-
SHA256
7f1bc33f3ee5bdb393cd9cf1bb3339866c3fa739e54dbaf57fd206e2abfc3a8c
-
SHA512
49002240307c49ec991e77627a2cccd4db94d7565db308bdee3c1d47b62ebb37bd748c470c3ddd3d724491f824494cb12ac9a8bc18d2d4ab0a418de099969570
-
SSDEEP
1536:nUhg+w9oRMKZLjDJr/dSxhxV3bRCWC2mYlq0qtEplcKA2aMPXsN:nUhgaRn1jF/wCMmX5EbcKnack
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3939d2b464a1608ba380ccf5311b5af8
Files
-
3939d2b464a1608ba380ccf5311b5af8.exe windows:4 windows x86 arch:x86
db43f38b9cdd0dbd6e2c1e883a7ea4dd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
shell32
SHGetSpecialFolderPathA
kernel32
lstrcpyA
SetCurrentDirectoryA
CreateDirectoryA
ExitProcess
GetModuleHandleA
GetCommandLineA
GlobalFree
GlobalAlloc
lstrcatA
FreeResource
CloseHandle
WriteFile
LockResource
CreateFileA
SizeofResource
LoadResource
FindResourceA
DeleteFileA
lstrcmpA
RemoveDirectoryA
FindClose
GetLastError
SetFileAttributesA
FindNextFileA
lstrlenA
CreateProcessA
GetExitCodeProcess
WaitForSingleObject
SetFilePointer
ReadFile
TerminateProcess
OpenProcess
lstrcmpiA
WideCharToMultiByte
FreeLibrary
LocalFree
GetProcAddress
LoadLibraryA
GetVersionExA
HeapFree
GetProcessHeap
HeapAlloc
FindFirstFileA
advapi32
RegCloseKey
RegOpenKeyA
RegCreateKeyA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ