Static task
static1
Behavioral task
behavioral1
Sample
3d5f87b5c2f3fe1ca49e41572b49ac4d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3d5f87b5c2f3fe1ca49e41572b49ac4d.exe
Resource
win10v2004-20231215-en
General
-
Target
3d5f87b5c2f3fe1ca49e41572b49ac4d
-
Size
81KB
-
MD5
3d5f87b5c2f3fe1ca49e41572b49ac4d
-
SHA1
5a53e1dd34a091f91c0d41f20ed39340b35e74a0
-
SHA256
e8ef52f447036c78411c113eb38219bc5c37f354d2d19275502827add360b6c5
-
SHA512
5c769ec486c08527bd12505303c387d725ac824ca9700f4a18e14c60cf978a9801e830facf1436b056859c6370c4f4915b524753cf7b685fb9a3ae7c95898aff
-
SSDEEP
768:5AlfYoqtKshR1WUt9wLJNODMCeZZthHKUFQ3g1NtI6R5gwTfHabISd0hQpwDMa:mXqtKcWUDDMCuiH30M6YwTfH0ISF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d5f87b5c2f3fe1ca49e41572b49ac4d
Files
-
3d5f87b5c2f3fe1ca49e41572b49ac4d.exe windows:1 windows x86 arch:x86
2dc2fa3180d3ed7bcf3c77f144278c1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
WriteFile
VirtualQuery
Sleep
SetFilePointer
SetEndOfFile
ReadFile
GetVersionExA
GetThreadLocale
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCurrentThreadId
GetCPInfo
FormatMessageA
EnumCalendarInfoA
CreateFileA
CompareStringA
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpyA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
ExitProcess
WriteFile
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
oleaut32
VariantChangeTypeEx
VariantCopyInd
VariantClear
SysStringLen
SysFreeString
SysAllocStringLen
shell32
ShellExecuteA
user32
MessageBoxA
LoadStringA
GetSystemMetrics
GetKeyboardType
LoadStringA
MessageBoxA
Sections
EXEB Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.packet Size: 2KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE