Static task
static1
Behavioral task
behavioral1
Sample
3cf6c2cfd47e816a800852cb38869dc9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3cf6c2cfd47e816a800852cb38869dc9.exe
Resource
win10v2004-20231215-en
General
-
Target
3cf6c2cfd47e816a800852cb38869dc9
-
Size
94KB
-
MD5
3cf6c2cfd47e816a800852cb38869dc9
-
SHA1
54f71bd9d2de62601bb0ed471f897d5291a1e235
-
SHA256
3ecc71ca70ea8208b1594c268506cf3a5e87c767ed9eede6321edd5cf969abe8
-
SHA512
41320908130da3ffbc7b53010bfed65f734d7357bc97f6c56f77cc7cc7a23ee5c27668462924b815a628b4c50a85753602c74a95d519d7c53e8ddbeadf697e81
-
SSDEEP
1536:eSbgYT2JjRmu7I/zlKFcx5udxnGPo7SUOVOwMvoW0RxUYAgJL:fbgrE8wsQo7VMMvCRxUbgL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cf6c2cfd47e816a800852cb38869dc9
Files
-
3cf6c2cfd47e816a800852cb38869dc9.exe windows:4 windows x86 arch:x86
3c51b21f3565cbdfb85761053aee3e36
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
AddAce
CreateServiceW
CloseServiceHandle
ClearEventLogA
CryptDecrypt
user32
BlockInput
CopyRect
CreateCaret
CreateDialogIndirectParamW
CreateIcon
AnyPopup
Sections
.text Size: 68KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE