Static task
static1
Behavioral task
behavioral1
Sample
3bc66572e4d87b53cf468f6d072f47fd.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3bc66572e4d87b53cf468f6d072f47fd.exe
Resource
win10v2004-20231222-en
General
-
Target
3bc66572e4d87b53cf468f6d072f47fd
-
Size
28KB
-
MD5
3bc66572e4d87b53cf468f6d072f47fd
-
SHA1
dde0920ef67cd09823a147bd3aabac88e39a4848
-
SHA256
618d8fdf80128046a072a23a184fc1e28a47c21a6d62bcbde3ee6f0e15d3cabb
-
SHA512
823fe86cfc17f2dd5e265e3b0ff5e96cc19caf613f3fad084d324e2fd5e928a23a730379b98744443b687c307a3714f5e77f25e85e19ee1ee5a5182814a65f8a
-
SSDEEP
384:lFVepLnzd9YtHsRp+9XJLYGbpouzIM2lAtghQY8V+:lKLYjPbCuz47x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bc66572e4d87b53cf468f6d072f47fd
Files
-
3bc66572e4d87b53cf468f6d072f47fd.exe windows:4 windows x86 arch:x86
9aaa0135f5722fed6500b9fcc064c607
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
GlobalUnlock
CreateMutexA
CreateFileW
GetExitCodeProcess
SetLastError
lstrlenW
HeapCreate
GetProcessHeap
GetCurrentThreadId
GetStdHandle
GetEnvironmentVariableA
lstrcpyA
GlobalFree
CloseHandle
GetModuleHandleA
ReleaseMutex
FindResourceW
TlsGetValue
UnmapViewOfFile
user32
SetFocus
DrawMenuBar
IsWindow
CheckRadioButton
CallWindowProcA
GetCaretPos
GetDC
DrawEdge
CreateMenu
GetDlgItem
FillRect
CreateWindowExA
DispatchMessageA
rsaenh
CPDeriveKey
CPGenKey
CPHashData
CPDecrypt
CPSignHash
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bxrkqwg Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE