Static task
static1
Behavioral task
behavioral1
Sample
3e010650f2de3ed7ba9d9d23fa88b878.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3e010650f2de3ed7ba9d9d23fa88b878.exe
Resource
win10v2004-20231215-en
General
-
Target
3e010650f2de3ed7ba9d9d23fa88b878
-
Size
233KB
-
MD5
3e010650f2de3ed7ba9d9d23fa88b878
-
SHA1
7fb0c83eb00fff80aaf20c43ca1d45b35f2744cb
-
SHA256
3f25f6dcb89a96c77a3473d42603935b716600d66ee4b64b8615cef84634a47f
-
SHA512
a97aa5e3ceb159b5dc2e9dcafed6feded781be186674a5eed3febf036cf1d65b3043f7e26fe9200a107fccbe49317a24860d73e26b8242183bff5517f8acca02
-
SSDEEP
6144:3CjxAXXNDWZ6n2SGY/2dQNSU4IzalLNQKZkZnHER:3CjSnNDWZ6bBnoNinkR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e010650f2de3ed7ba9d9d23fa88b878
Files
-
3e010650f2de3ed7ba9d9d23fa88b878.exe windows:5 windows x86 arch:x86
8ca3bb1a243d016e3151d5801aa84a52
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
GetHGlobalFromStream
CoBuildVersion
CoGetMarshalSizeMax
CoGetInstanceFromIStorage
CoIsOle1Class
gdi32
CreateDCA
CopyMetaFileW
CombineTransform
CreateDIBSection
opengl32
glMatrixMode
glVertex3f
glPopMatrix
kernel32
LoadLibraryW
HeapSize
UnhandledExceptionFilter
IsProcessorFeaturePresent
HeapReAlloc
HeapAlloc
RtlUnwind
MultiByteToWideChar
DeleteCriticalSection
FileTimeToDosDateTime
CreateProcessW
GetCompressedFileSizeW
Beep
GetProcessWorkingSetSize
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
GetProcAddress
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
HeapFree
Sleep
GetUserDefaultLCID
GetLocaleInfoW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringW
Sections
.text Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ