Static task
static1
Behavioral task
behavioral1
Sample
3a0a4be2bc93b94889da02f31aef2311.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3a0a4be2bc93b94889da02f31aef2311.exe
Resource
win10v2004-20231222-en
General
-
Target
3a0a4be2bc93b94889da02f31aef2311
-
Size
42KB
-
MD5
3a0a4be2bc93b94889da02f31aef2311
-
SHA1
f9acaf6876777fde040fe13cee59d59bf5d37b03
-
SHA256
f143328c0cba3e279e4c1740a0e4a4297783014c9dfb7132b8fe21c9730b4efa
-
SHA512
7d5bb6412e5d234e640fa324424e3b5300657c56116b5e2347515f369f3d6fcb34f40004b86b2f608f6a4854840090645889c77a2193d3cccfdc7dd2154247d1
-
SSDEEP
768:IJuNy9t2fuvrzrO30ghSeoqPEVA+o7FdmIEbw+7oUl87jy:uuo+uvfKseoqPsATBdmIEUcohj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a0a4be2bc93b94889da02f31aef2311
Files
-
3a0a4be2bc93b94889da02f31aef2311.exe windows:4 windows x86 arch:x86
d1eea82c1b2a526402f06a40075adf96
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CallNamedPipeW
CreateDirectoryW
DeleteFiber
EnumResourceLanguagesA
ExitProcess
GetBinaryType
GetCPInfoExA
GetCalendarInfoW
GetConsoleOutputCP
GetExitCodeProcess
GetFullPathNameA
GetNumberFormatA
GetPrivateProfileSectionNamesA
GetTapeStatus
GetTempPathW
GetThreadContext
GetThreadSelectorEntry
GetVersionExA
HeapLock
IsBadStringPtrA
IsDBCSLeadByte
IsValidLocale
ReadDirectoryChangesW
RequestWakeupLatency
SetSystemPowerState
TlsSetValue
VerLanguageNameW
WaitForMultipleObjectsEx
WriteFile
_lread
user32
ActivateKeyboardLayout
AnyPopup
CallMsgFilterW
CreatePopupMenu
DdeEnableCallback
DlgDirListComboBoxA
EndMenu
GetMenuItemRect
GetWindow
InflateRect
IsCharAlphaNumericW
OemToCharBuffW
PostQuitMessage
RemovePropA
SetCaretBlinkTime
SetDebugErrorLevel
SetForegroundWindow
SetMenu
SetMenuItemInfoW
SetWindowLongW
SetWindowWord
SetWindowsHookExA
SetWindowsHookExW
gdi32
CopyMetaFileW
CreateBitmapIndirect
CreateDIBPatternBrush
DPtoLP
DrawEscape
GetCharWidthW
GetClipRgn
GetDIBits
GetEnhMetaFileDescriptionW
GetGraphicsMode
GetWorldTransform
Pie
RemoveFontResourceA
SetArcDirection
SetBoundsRect
SetDIBColorTable
SetDIBits
SetICMProfileA
SetMetaFileBitsEx
SetPolyFillMode
SetROP2
SetTextCharacterExtra
SetViewportOrgEx
SetWorldTransform
TextOutA
UnrealizeObject
Sections
.text Size: 512B - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ