Static task
static1
Behavioral task
behavioral1
Sample
3d54ae1334e08027f9ee53f477f4db35.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3d54ae1334e08027f9ee53f477f4db35.exe
Resource
win10v2004-20231215-en
General
-
Target
3d54ae1334e08027f9ee53f477f4db35
-
Size
76KB
-
MD5
3d54ae1334e08027f9ee53f477f4db35
-
SHA1
cbdc8ce085487194de3ff972b71471ac70a68fde
-
SHA256
1fa11a81777ba8577e1166226369597175798c4a1722b07e485ac0cf182f240a
-
SHA512
0b367afa21989e4b2ed83bcd6b36efc116695b2ef577cbea2d90854ce27bee6952f0465b04da7726598d3744f58226540a4ab33c68b4f4eafa55cb7277478b7e
-
SSDEEP
1536:HNrGvhM+XeXCuMbjAb3mcRypQkAQF2p2wjm:HaXXekHAKYyKkTV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d54ae1334e08027f9ee53f477f4db35
Files
-
3d54ae1334e08027f9ee53f477f4db35.exe windows:4 windows x86 arch:x86
fed4692720d33e68436de052d48e29d6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
GetCPInfo
GetConsoleMode
GetComputerNameA
OpenFile
CreateProcessA
ReadConsoleA
DeleteAtom
ExitThread
WriteFile
CreateDirectoryA
Sleep
FindAtomA
GetCommandLineA
GetStdHandle
CopyFileExA
ReadConsoleA
CreateThread
CopyFileW
ReadFile
GetLastError
DeleteAtom
ExitThread
WriteFile
GetFileSize
GetComputerNameA
CreateProcessA
OpenFileMappingA
GetComputerNameA
GetLastError
GetFileSize
FindAtomA
OpenFileMappingA
GetStdHandle
DeleteFileW
ExitThread
CopyFileW
CreateProcessA
CopyFileExA
WriteFile
DeleteFileA
CreateThread
Sleep
GlobalFree
CreateProcessA
OpenFileMappingA
DeleteFileA
CopyFileA
GetFileTime
SetLastError
FindFirstFileA
GetFileSize
GetLastError
DeleteFileW
GetComputerNameA
OpenFile
CreateThread
FindAtomA
CreateDirectoryA
SetLastError
Sleep
ReadFile
CopyFileExW
GlobalFree
OpenFileMappingA
OpenFile
DeleteFileA
GetCPInfo
GetConsoleMode
GetLastError
DeleteAtom
GetComputerNameA
GetFileTime
GetCommandLineA
GetFileSize
CopyFileW
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.mvdata Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ