Static task
static1
Behavioral task
behavioral1
Sample
3c516285efbb7ebbf1134ee2b142f64e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3c516285efbb7ebbf1134ee2b142f64e.exe
Resource
win10v2004-20231215-en
General
-
Target
3c516285efbb7ebbf1134ee2b142f64e
-
Size
41KB
-
MD5
3c516285efbb7ebbf1134ee2b142f64e
-
SHA1
2f0d67ee19b92a1cddb0876b8032099d9df15957
-
SHA256
4a3c68911379b950b01396d3e3648cafb66d2291a12a671b053a5915273884be
-
SHA512
a93cc10f3acf88c9f65ef0a7afbdc9e61ac6b8e917f7396125918b9014e35f938b3fd5ebaed1a6af33c395e183323bfe4aa4b7b4c394c2ff36463ab0d659b95a
-
SSDEEP
768:LiKWMvva2FYdoBnZtHxnKGoLvCnOG0ech4B5zfJpouk5NHc:+Oa24MnTHxnXUvCnOGSh4BDprkXHc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c516285efbb7ebbf1134ee2b142f64e
Files
-
3c516285efbb7ebbf1134ee2b142f64e.exe windows:4 windows x86 arch:x86
e875917878f21bec1f90c43df63b8cbe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeConsole
GetCommandLineW
GetMailslotInfo
OpenSemaphoreA
GetACP
_lclose
FormatMessageW
GetCurrentProcess
GlobalCompact
DelayLoadFailureHook
GetTempFileNameW
SetStdHandle
OutputDebugStringW
FileTimeToSystemTime
EnumResourceTypesA
QueryPerformanceFrequency
MoveFileWithProgressW
TransmitCommChar
WriteProfileStringW
HeapCompact
EnumSystemLocalesA
ExitProcess
GetPrivateProfileSectionW
ReadConsoleOutputA
PulseEvent
GlobalLock
SetConsoleCP
user32
CliImmSetHotKey
MapVirtualKeyExA
SetThreadDesktop
GetMenuItemCount
MapVirtualKeyExW
VkKeyScanExW
InSendMessage
ResolveDesktopForWOW
UserRealizePalette
CharUpperBuffA
UnregisterHotKey
GetWindowThreadProcessId
DefWindowProcW
EnumDisplaySettingsA
IsCharAlphaW
GetClassLongA
SendNotifyMessageA
CloseWindow
WindowFromDC
FindWindowW
RemovePropA
MsgWaitForMultipleObjects
SetWindowRgn
DdeUnaccessData
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE