Static task
static1
Behavioral task
behavioral1
Sample
3d4cbd8739ed324a7eacded4b0d16584.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3d4cbd8739ed324a7eacded4b0d16584.exe
Resource
win10v2004-20231215-en
General
-
Target
3d4cbd8739ed324a7eacded4b0d16584
-
Size
539KB
-
MD5
3d4cbd8739ed324a7eacded4b0d16584
-
SHA1
21f915b549c1a381d5493c8ebf7b5cd4524c0029
-
SHA256
6aa2a65c45bde0ab85e4a3b8c510d598912fb1488f36cdbe3e37da0ed2c7a158
-
SHA512
c6c7e0e8b86c3a68563a148aa175547be4dbe24687b52e30fb8e103853bf389fbec1a2e21b82a162cead5ee7b8c53589c6396e84849cce6fc72f80c56b09f54d
-
SSDEEP
12288:0q5BCuh936lyGUuky1z2elSvK9xN26WiWJD:fUuh9KlFU5uZze
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d4cbd8739ed324a7eacded4b0d16584
Files
-
3d4cbd8739ed324a7eacded4b0d16584.exe windows:4 windows x86 arch:x86
c104865192371f12d173013c9247ccca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
WideCharToMultiByte
GetCommandLineW
LockResource
GetCurrentProcessId
SizeofResource
CreateProcessW
GetShortPathNameA
lstrlenW
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
FindNextFileW
LCMapStringA
FindResourceW
GetConsoleCP
lstrlenA
GetSystemInfo
HeapCreate
LCMapStringW
LoadLibraryExW
GetLastError
LeaveCriticalSection
ExitProcess
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GlobalFree
GetTimeZoneInformation
RemoveDirectoryA
GlobalLock
WaitForMultipleObjects
DuplicateHandle
FindNextFileA
CreateFileMappingA
CompareStringA
lstrcpyA
GetCurrentThreadId
FindFirstFileA
lstrcmpA
CompareStringW
GetProcessHeap
GetProcAddress
DeleteFileW
DeleteFileA
GetFileSize
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
SetEvent
lstrcmpiA
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
SetCurrentDirectoryA
GetModuleHandleA
GetVersion
GetLocaleInfoA
SetEndOfFile
CreateEventW
GetConsoleMode
GlobalAlloc
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
GetStartupInfoA
SetUnhandledExceptionFilter
CreateThread
SetFilePointer
CreateMutexA
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
LoadLibraryExA
GetModuleFileNameA
FlushFileBuffers
HeapAlloc
IsDebuggerPresent
VirtualProtect
GetModuleFileNameW
InitializeCriticalSection
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
GetEnvironmentVariableA
FormatMessageW
LocalFree
FreeLibrary
GetFullPathNameA
GetStringTypeW
HeapReAlloc
GetExitCodeProcess
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
LoadLibraryW
GetCPInfo
GetTempPathA
FreeEnvironmentStringsW
SetErrorMode
ExpandEnvironmentStringsA
lstrcatA
LocalAlloc
GetCurrentDirectoryA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetLocalTime
GetFileAttributesW
HeapDestroy
FindFirstFileW
GetDriveTypeA
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
ReadFile
CloseHandle
lstrcpynA
GetACP
GetModuleHandleW
SetStdHandle
GetEnvironmentStrings
CreateProcessA
IsValidCodePage
UnmapViewOfFile
VirtualFree
Sleep
IsBadReadPtr
VirtualAlloc
InterlockedIncrement
GetOEMCP
user32
GetSystemMetrics
DefWindowProcA
KillTimer
BeginPaint
PeekMessageA
SetFocus
FillRect
SetTimer
GetSubMenu
RegisterClassA
IsIconic
LoadStringA
GetWindow
IsWindowEnabled
TranslateMessage
SetWindowPos
EnableWindow
SetCapture
ShowWindow
UpdateWindow
GetParent
DestroyWindow
GetKeyState
EnableMenuItem
MoveWindow
SendMessageA
DrawTextA
GetCursorPos
GetDC
SetForegroundWindow
EndPaint
DispatchMessageA
IsWindow
LoadBitmapA
ReleaseDC
PostQuitMessage
DestroyMenu
GetWindowRect
PostMessageA
SetCursor
PtInRect
CreateWindowExA
GetDlgItem
ScreenToClient
LoadCursorA
GetDesktopWindow
GetFocus
DispatchMessageW
ReleaseCapture
SetWindowLongA
EndDialog
CheckMenuItem
ClientToScreen
CallWindowProcA
GetClientRect
wsprintfA
MessageBoxA
GetSysColor
SystemParametersInfoA
InvalidateRect
GetWindowLongA
ole32
CoInitialize
CoCreateInstance
gdi32
SetBkColor
DeleteObject
DeleteDC
GetStockObject
CreateCompatibleDC
CreateSolidBrush
SelectObject
oleaut32
VariantClear
SysFreeString
VariantInit
SysAllocString
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
advapi32
RegDeleteValueA
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
OpenProcessToken
RegSetValueExW
msvcrt
_exit
_controlfp
Sections
uggssie Size: 538KB - Virtual size: 538KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE