Static task
static1
Behavioral task
behavioral1
Sample
3ac19099b6ecb8807e8283bdf0e20216.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ac19099b6ecb8807e8283bdf0e20216.exe
Resource
win10v2004-20231215-en
General
-
Target
3ac19099b6ecb8807e8283bdf0e20216
-
Size
572KB
-
MD5
3ac19099b6ecb8807e8283bdf0e20216
-
SHA1
097db902465408411938f836bab0a8bd3adc5015
-
SHA256
32d7ada2c59ca6b39eb605975d601f762cf7003d356981ef0546c86329eb1df1
-
SHA512
55156a6fe389976d656e64b47e98767c8146ef728da01b6a207c7824f177eb62fd147eb228b8db6a553039e3edec7cee7cc3919ce7804c69b635120acc5bce8a
-
SSDEEP
6144:JtDMlLv36Qd7POVhtGmDkl3zT7aACtOajjKWyFeXDbpSJNFnQa6zVJSAE+BQ:JtolLV5QtGmDi1Cv7GfJNpQZJJ7BQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ac19099b6ecb8807e8283bdf0e20216
Files
-
3ac19099b6ecb8807e8283bdf0e20216.exe windows:4 windows x86 arch:x86
fd9c9611d874fb1321cefafd95a9c476
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateEventA
CreateMutexA
GetProcAddress
LoadLibraryW
SetEvent
GetLastError
VirtualAlloc
PulseEvent
Sleep
CloseHandle
GetModuleHandleA
GetSystemInfo
VirtualProtect
GetLocaleInfoA
FlushFileBuffers
RtlUnwind
InterlockedExchange
OpenMutexA
CreateFileA
GetStringTypeW
GetStringTypeA
ExitProcess
LCMapStringW
ResetEvent
MultiByteToWideChar
GetStartupInfoA
GetCommandLineA
GetVersionExA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
SetEndOfFile
ReadFile
SetFilePointer
SetStdHandle
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
VirtualQuery
user32
GetDesktopWindow
ReleaseDC
ShowWindow
FindWindowA
gdi32
DrawEscape
CreateCompatibleDC
psapi
GetModuleInformation
avifil32
AVIFileInit
msvfw32
DrawDibClose
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vdata Size: 436KB - Virtual size: 955KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ