Static task
static1
Behavioral task
behavioral1
Sample
3c5c2f53e9be72ed3077640f6d16ae4c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3c5c2f53e9be72ed3077640f6d16ae4c.exe
Resource
win10v2004-20231215-en
General
-
Target
3c5c2f53e9be72ed3077640f6d16ae4c
-
Size
392KB
-
MD5
3c5c2f53e9be72ed3077640f6d16ae4c
-
SHA1
050c9dbfba248bcff5d0f9c2a5306e275648e4da
-
SHA256
ad11fddd8f6bd15c4de6d9259966b4cb912c5219ac5d10a88ac968eb05aa329f
-
SHA512
3aec26cd8a667233f83d756b282e3de034d6317a83bb1e67457e78ca86f91b649606c9733a0dae0180b956ccbc8ab707f499a32e1a1df38dc7a3cf5a082ebdbc
-
SSDEEP
6144:/m92mGp9VUwTZtX02giP9YoRRQGb8gJCPankzjzVjyTVyS9m1D4EVczjzLn+:VjmwTZSihRQwJCi4zVWThBEur+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c5c2f53e9be72ed3077640f6d16ae4c
Files
-
3c5c2f53e9be72ed3077640f6d16ae4c.exe windows:4 windows x86 arch:x86
9f77f103aed3a314444267e0200d82f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
FreeEnvironmentStringsA
LoadLibraryExW
GetACP
UnmapViewOfFile
GetLastError
TlsGetValue
ExitThread
Sleep
SetConsoleCursorInfo
LocalUnlock
FindClose
CreateMutexA
ReleaseMutex
HeapCreate
FindResourceA
SetLastError
HeapDestroy
GlobalFree
GetModuleHandleA
user32
IsWindow
DrawEdge
GetFocus
CopyRect
GetIconInfo
GetDC
FillRect
CheckRadioButton
DrawMenuBar
DispatchMessageA
DefWindowProcW
GetDlgItem
CallWindowProcA
uxtheme
DrawThemeEdge
GetThemeRect
DrawThemeIcon
DrawThemeText
GetThemeSysInt
clbcatq
SetupOpen
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ