Static task
static1
Behavioral task
behavioral1
Sample
39c27bc01c87d1760afb02b52cace09f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
39c27bc01c87d1760afb02b52cace09f.exe
Resource
win10v2004-20231215-en
General
-
Target
39c27bc01c87d1760afb02b52cace09f
-
Size
234KB
-
MD5
39c27bc01c87d1760afb02b52cace09f
-
SHA1
a4e9c0f6c364662c803f44decacafe98e35eb888
-
SHA256
39cffddb3acf57382ca6e5f642f0f3dae47d02878bafd9ce8cd1098d203d9cc4
-
SHA512
4a6e91e340a254e695076535719e4c032f379ed4746c5d0eb4102af9c125569e47408b5eccf8abd6a51f1d38f35a7412e9be80cfe19c48174595b79159f889e9
-
SSDEEP
3072:ay9HuDuCHj8Ns008bBC/ppGYjRWTY9ZuYMFkVaVQe5nu5xcTHFZqTTeTTTfqTTTN:ayXzbqSY1qYXMfQe5nOUHFZlxy5dL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39c27bc01c87d1760afb02b52cace09f
Files
-
39c27bc01c87d1760afb02b52cace09f.exe windows:4 windows x86 arch:x86
ffea70b21a5bfa6d47b659e3ddf60349
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CopyFileW
CloseHandle
GetModuleFileNameW
GetModuleHandleW
CompareStringW
CompareStringA
GetStringTypeW
FreeEnvironmentStringsW
WaitForSingleObject
GetConsoleOutputCP
WriteConsoleA
SetEndOfFile
GetLocaleInfoA
GetTimeZoneInformation
LCMapStringW
LCMapStringA
FlushFileBuffers
InitializeCriticalSection
LoadLibraryA
GetModuleHandleA
OpenProcess
GetStringTypeA
GetPrivateProfileStringW
IsValidCodePage
GetProcAddress
GetEnvironmentStringsW
CreateProcessW
WriteConsoleW
CreateFileW
GetOEMCP
GetACP
GetCPInfo
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
ExitThread
GetCurrentThreadId
GetLastError
CreateThread
CreateDirectoryA
SetEnvironmentVariableW
GetCurrentDirectoryW
SetCurrentDirectoryW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFileType
GetFileAttributesW
EnterCriticalSection
LeaveCriticalSection
GetFileAttributesA
DeleteFileW
DeleteFileA
MultiByteToWideChar
FindClose
GetDriveTypeA
FindFirstFileA
ExitProcess
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
VirtualAlloc
HeapReAlloc
SetStdHandle
RtlUnwind
SetEnvironmentVariableA
WideCharToMultiByte
HeapSize
GetFullPathNameA
GetCurrentDirectoryA
CreateFileA
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointer
SetFileAttributesA
user32
GetWindowPlacement
SetTimer
GetWindowRect
DrawTextW
SendMessageW
DialogBoxParamW
SetWindowTextW
CopyRect
GetClientRect
LoadIconW
GetDC
OffsetRect
GetWindowTextW
SystemParametersInfoW
ReleaseDC
GetDlgItem
EndDialog
SendDlgItemMessageW
GetDesktopWindow
SetWindowPos
gdi32
DeleteObject
SelectObject
CreateFontIndirectW
wsock32
ntohl
comctl32
InitCommonControlsEx
shell32
ShellExecuteExW
Sections
.text Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ