Static task
static1
Behavioral task
behavioral1
Sample
3d56b4af6477edf319b1b8c204060f4b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3d56b4af6477edf319b1b8c204060f4b.exe
Resource
win10v2004-20231215-en
General
-
Target
3d56b4af6477edf319b1b8c204060f4b
-
Size
88KB
-
MD5
3d56b4af6477edf319b1b8c204060f4b
-
SHA1
732a9df51c3923723b341cfaaf2b3410397283c8
-
SHA256
7750b134887b681dc9be99af9c92bd2d79f83e520ddfbcef2ccac20ebf443b1d
-
SHA512
4fe2c46838684bf6332113608e69580d58fe63ee496650c361beaab38d226ffd3b26fc2c58f552b9e91bd91d24e57be2a4f5fc047d7a2389b584b5cf2279c95c
-
SSDEEP
1536:MILvCEqAPLagUc9s9PBTnGrVn70ThFN7zPE:hLvCEqgXHs9PlnGrV70ThFNs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d56b4af6477edf319b1b8c204060f4b
Files
-
3d56b4af6477edf319b1b8c204060f4b.exe windows:4 windows x86 arch:x86
8b021bb6abf4cf63ef1887f16ce592ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr71
_controlfp
_onexit
__dllonexit
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
??1type_info@@UAE@XZ
_except_handler3
__security_error_handler
strstr
??3@YAXPAX@Z
_CxxThrowException
__CxxFrameHandler
strncpy
strncat
strlen
strchr
memcpy
??2@YAPAXI@Z
strcat
memset
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetModuleHandleA
GetCommandLineA
CreateMutexA
ReleaseMutex
SetUnhandledExceptionFilter
GetModuleFileNameA
GetFileAttributesA
GetLastError
SetLastError
lstrcmpiA
lstrlenA
lstrcpyA
GetTempPathA
lstrcatA
FindResourceA
LoadResource
SystemTimeToFileTime
ExitProcess
CloseHandle
SetFileTime
FindClose
CreateFileA
FindFirstFileA
DeleteFileA
LocalFileTimeToFileTime
WriteFile
SizeofResource
MoveFileA
user32
wsprintfA
advapi32
StartServiceA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegCreateKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
OpenServiceA
shell32
SHGetFolderPathA
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ