Static task
static1
Behavioral task
behavioral1
Sample
3c9943ec862576eaa720145432d048ad.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3c9943ec862576eaa720145432d048ad.exe
Resource
win10v2004-20231215-en
General
-
Target
3c9943ec862576eaa720145432d048ad
-
Size
48KB
-
MD5
3c9943ec862576eaa720145432d048ad
-
SHA1
b36d5fdc697f1de45df2de3dcfa5cec10f1381f0
-
SHA256
bbc2ceb632b9394912c5babc1186be7b2fbcdaaaa9f64141613e0ddca3d23424
-
SHA512
3304502dc434dfefebc44d6bef5669dd73d82357b554b8b3242d63bd02a1ec4b46423d674907e6d27b1fa824fbe5bfa0160410539e8bfaaa5fd0a2e7d2c6e772
-
SSDEEP
768:wrMwzH5IuIEjulk3xMm7eIS8zb5I0NOppiZ1Sa6drfy/T+/NAdEfw:uMXvtk3xZ7emFI0NepCsdrK/T+ydEf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c9943ec862576eaa720145432d048ad
Files
-
3c9943ec862576eaa720145432d048ad.exe windows:4 windows x86 arch:x86
76680e68c5f7dcafa9bde1b9f9d640cc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
ExitProcess
GetLastError
lstrcpyA
DeleteFileA
GetProcAddress
FreeLibrary
ExitThread
GetCurrentProcessId
lstrcatA
GetModuleFileNameA
WaitForMultipleObjects
CloseHandle
GetSystemDirectoryA
lstrlenA
GetTickCount
ResetEvent
CreateThread
WaitForSingleObject
SetEvent
CreateEventA
CreateMutexA
GetVersionExA
CreateProcessA
WriteFile
Sleep
CreateFileA
ReleaseMutex
SizeofResource
LoadResource
FindResourceA
GetTempFileNameA
GetFileAttributesA
lstrcmpA
HeapFree
user32
wsprintfA
advapi32
RegNotifyChangeKeyValue
RegSetValueExA
SetSecurityDescriptorDacl
RegCreateKeyExA
InitializeSecurityDescriptor
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
ole32
OleUninitialize
OleInitialize
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ