Static task
static1
Behavioral task
behavioral1
Sample
3ad1ca12942842502d7fe1ea8a8380ad.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ad1ca12942842502d7fe1ea8a8380ad.exe
Resource
win10v2004-20231215-en
General
-
Target
3ad1ca12942842502d7fe1ea8a8380ad
-
Size
123KB
-
MD5
3ad1ca12942842502d7fe1ea8a8380ad
-
SHA1
12586d50b349533d4498b7343e3553feffb495d0
-
SHA256
8d2bfeea0288349ea629c941f01955d7dffb928d046e2b5af125c59410a23505
-
SHA512
d37319987e54b7bc76112b83cbe9499500e3fd759cc8442bc27dad41e882d1022d80eafcd282a7ac4e0d320867ced1f10772d1c1789a923d83769a504d5602e1
-
SSDEEP
3072:pLYca9eIMq2+5GEhSiI2aq9PCtbCK8EYC8GRqGtt:p29rM+UrQzC85Ut
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ad1ca12942842502d7fe1ea8a8380ad
Files
-
3ad1ca12942842502d7fe1ea8a8380ad.exe windows:4 windows x86 arch:x86
cf458393086841fa98042b2cbe9fb3c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetModuleFileNameW
CloseHandle
Sleep
LeaveCriticalSection
LoadLibraryW
GetProcAddress
UnhandledExceptionFilter
LocalAlloc
GetVersionExA
GetCurrentProcess
InterlockedCompareExchange
GetSystemTimeAsFileTime
GetLastError
DisableThreadLibraryCalls
DeleteCriticalSection
GetModuleHandleA
user32
BeginPaint
TranslateMessage
GetSysColor
DispatchMessageW
EnableWindow
DestroyWindow
SetWindowTextW
EndDialog
PostMessageW
CharNextW
ShowWindow
LoadIconW
PostQuitMessage
SetForegroundWindow
GetSystemMetrics
SendMessageW
Sections
.text Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 964B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9wwpVmri Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
0aSzutmp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pbuzAfxE Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ