?CreateDlgMessage@@YGHPAXPADK|U
Static task
static1
Behavioral task
behavioral1
Sample
3c9ac1c6d76515d7a1be62167e48eedd.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3c9ac1c6d76515d7a1be62167e48eedd.exe
Resource
win10v2004-20231222-en
General
-
Target
3c9ac1c6d76515d7a1be62167e48eedd
-
Size
166KB
-
MD5
3c9ac1c6d76515d7a1be62167e48eedd
-
SHA1
0ac8f6af74aab370fc23dc6d7588ad80664ee036
-
SHA256
3eea1f5fb9d4592a8b9d02ed989ed0a403cd1dfa992e9c031ba2619733d772e2
-
SHA512
fbf8e4486a674bade670e6a10cb12b5da0a2ff8205086e09611eda3c6932dc88f2e95b5caa6105482ecb59cd17140ca6f980bc967e12b8fc7c82e2b55cd38e0f
-
SSDEEP
3072:GMQiCd2Kn6SqWR3qWaAcXOoA9Z9MrclxYg12E4kOoDBH2gIuK0gE893Yd:GMGCS9Z9mCBvDN2gIuK9gd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c9ac1c6d76515d7a1be62167e48eedd
Files
-
3c9ac1c6d76515d7a1be62167e48eedd.exe windows:5 windows x86 arch:x86
6695fe53ec7c5a9fbbb9365b54c1e875
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
ChrCmpIW
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_amsg_exit
remove
iswdigit
_initterm
_ismbblead
_XcptFilter
_exit
_cexit
__setusermatherr
vsprintf
strlen
__getmainargs
user32
CharUpperBuffA
SendMessageTimeoutW
TranslateMessage
OpenDesktopW
CallWindowProcA
GetNextDlgTabItem
IsCharUpperW
GetWindowDC
kernel32
LoadLibraryW
CopyFileW
GetModuleHandleW
GetModuleFileNameA
SetSystemTime
ClearCommBreak
LoadLibraryExA
GetLocaleInfoW
LoadLibraryA
ResetEvent
lstrlenA
gdi32
StartPage
GetTextMetricsW
OffsetRgn
GetDIBColorTable
SetViewportExtEx
Exports
Exports
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.hill Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 137KB - Virtual size: 394KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE