Static task
static1
Behavioral task
behavioral1
Sample
3ab1c0aa2ced150d4e4df0ae1279ec8d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ab1c0aa2ced150d4e4df0ae1279ec8d.exe
Resource
win10v2004-20231215-en
General
-
Target
3ab1c0aa2ced150d4e4df0ae1279ec8d
-
Size
2.2MB
-
MD5
3ab1c0aa2ced150d4e4df0ae1279ec8d
-
SHA1
9e0ec3de6f0f9782bee7598b4cf1164cb82c81a7
-
SHA256
b9d5bfef2d7fd1348c250ce057911bd108f7d98ff6a996e404458517209bf1e6
-
SHA512
457798a958df65d9c71683c0d9b75e3fec08aabe0f83ae957fbf4756c0e8738f0dc17b7aeda7613c1d9dba5078c23325326c86ab7a48af673f780dcf7ce1531a
-
SSDEEP
24576:XaZGgMtVodm9W3kuz/C8B7mFo7ZHGCBSsoTQ5W8:XKGgSW0u7hmBGSzTan
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ab1c0aa2ced150d4e4df0ae1279ec8d
Files
-
3ab1c0aa2ced150d4e4df0ae1279ec8d.exe windows:4 windows x86 arch:x86
fc69da0cce06452e8ed0280fe4d49bea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetFocus
GetMenu
CopyIcon
AppendMenuW
DialogBoxParamW
GetWindowTextA
GetCursor
DrawIcon
GetDC
GetDlgItem
CopyImage
DrawTextW
CalcMenuBar
DialogBoxParamA
GetWindowTextLengthA
BlockInput
DrawIconEx
CreateIcon
AlignRects
GetDC
GetWindowTextLengthA
GetWindowTextA
EndDialog
IsMenu
DrawTextA
GetCursor
AppendMenuW
DialogBoxParamA
CopyIcon
InsertMenuA
CopyImage
kernel32
GetFileSize
GlobalFree
DeleteFileA
ReadFile
CopyFileExA
OpenFile
SetLastError
GetCommandLineA
GetCPInfo
ExitThread
ReadConsoleW
GetStdHandle
DeleteFileW
GetComputerNameA
GetLastError
WriteFile
CopyFileA
CreateDirectoryA
FindFirstFileA
DeleteAtom
Sleep
DeleteFileW
CreateThread
CopyFileW
OpenFile
ReadFile
DeleteFileA
GetStdHandle
GlobalFree
DeleteAtom
ReadConsoleW
CopyFileExW
FindAtomA
GetFileTime
SetLastError
GetConsoleMode
WriteFile
OpenFileMappingA
ExitThread
Sleep
GetCommandLineA
GetFileSize
CopyFileExW
FindFirstFileA
FindAtomA
GetFileTime
ReadConsoleA
ReadFile
GetFileSize
ExitThread
CreateThread
GlobalFree
GetComputerNameA
DeleteFileA
GetConsoleMode
CopyFileA
CopyFileExA
CopyFileW
GetStdHandle
advapi32
RegDeleteValueA
RegDeleteKeyW
RegQueryValueExW
RegLoadKeyW
RegQueryValueW
RegDeleteValueW
RegOpenKeyW
RegOpenKeyExW
RegEnumKeyExA
RegReplaceKeyW
RegEnumValueW
RegQueryValueA
RegEnumKeyW
RegLoadKeyA
RegReplaceKeyA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegOpenKeyA
RegEnumKeyExW
RegQueryValueExA
RegCreateKeyExA
RegFlushKey
comctl32
ImageList_Copy
ImageList_BeginDrag
ImageList_GetDragImage
ImageList_DrawIndirect
ImageList_Destroy
ImageList_GetImageCount
ImageList_Draw
ImageList_LoadImageA
ImageList_DragLeave
ImageList_DragMove
ImageList_GetImageInfo
ImageList_Read
ImageList_Merge
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_GetImageRect
ImageList_Create
ImageList_GetIcon
InitCommonControls
ImageList_Replace
ImageList_DragShowNolock
Sections
.text Size: 264KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.kdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bbs Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sdata Size: 1.9MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbs Size: 4KB - Virtual size: 271B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ