Static task
static1
Behavioral task
behavioral1
Sample
3b15cd8b28d6273b9df7e3ebb38165c6.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3b15cd8b28d6273b9df7e3ebb38165c6.exe
Resource
win10v2004-20231215-en
General
-
Target
3b15cd8b28d6273b9df7e3ebb38165c6
-
Size
82KB
-
MD5
3b15cd8b28d6273b9df7e3ebb38165c6
-
SHA1
07dd9d271542e9e963b4e005a327fee75bba0dd9
-
SHA256
bb10c087b34e18c401340da59f73562c20596dfb1ea9bebe6f72a75e1ada04ec
-
SHA512
5b8314dea98e19731bd0bab098385748942de0ab80a51191f443716b0fec259a48562e2ce7644d376ad6041dbec901322bbacc10ace3e62f974da1f38a6dcd86
-
SSDEEP
1536:tfJmMUCAhRrFm5bprv2OsMlyd+mtaa+qpmGZMHGxW6Ew/Z4Ro:h/U5BFm5bprv2Onyd+mtaNqpVZMMWdU4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b15cd8b28d6273b9df7e3ebb38165c6
Files
-
3b15cd8b28d6273b9df7e3ebb38165c6.exe windows:4 windows x86 arch:x86
f8318561048ad4b1d546f7ca59015326
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CopyImage
GetDlgItem
DrawIconEx
InsertMenuA
GetMenu
LoadCursorA
DialogBoxParamW
GetWindowTextLengthA
LoadMenuA
IsWindow
CopyIcon
CreateIcon
DrawIcon
GetDC
DrawTextW
GetCursor
GetFocus
DialogBoxParamA
CloseWindow
GetWindowTextA
IsMenu
kernel32
lstrcpynW
GetVersion
GetModuleFileNameA
LCMapStringA
lstrcatA
GetStringTypeA
CreateFileA
GetStdHandle
WriteFile
GetFileType
GetOEMCP
GetACP
GetStartupInfoA
MultiByteToWideChar
GetCurrentProcess
GetCPInfo
lstrcpynA
lstrcpyA
LCMapStringW
GetCommandLineA
SetFilePointer
comctl32
CreateUpDownControl
ImageList_DrawEx
DllGetVersion
CreateToolbar
ImageList_Add
CreateStatusWindow
DrawStatusText
ImageList_LoadImageW
DrawStatusTextW
ImageList_Destroy
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 18.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 14B
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ