Static task
static1
Behavioral task
behavioral1
Sample
3e3e2c88a775ace86eb4b9dc0340d7fb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3e3e2c88a775ace86eb4b9dc0340d7fb.exe
Resource
win10v2004-20231215-en
General
-
Target
3e3e2c88a775ace86eb4b9dc0340d7fb
-
Size
551KB
-
MD5
3e3e2c88a775ace86eb4b9dc0340d7fb
-
SHA1
e6ad5b8bfbc0bfde780f9a8295e44dbc138b3b22
-
SHA256
5e2389a359c67c9e81b4eb08f116b70398bd9288a19929131ab430363064acc8
-
SHA512
8355a1b8932e57fb2f7b6c9b10eefbb55e9aa914ddfaa555c9072e928f904b5b4c45d1a71928061cfa920eb83b491106824d2142dc6a5ff679ace3a5df6e7ed2
-
SSDEEP
12288:gx89WqIXEU0eKIjrrCigKyTYpNuBcsiT+BlvIto9BR73PhHcB8Pwr:GqNUqyrCtTYR7T+BxN9BRLh86
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e3e2c88a775ace86eb4b9dc0340d7fb
Files
-
3e3e2c88a775ace86eb4b9dc0340d7fb.exe windows:4 windows x86 arch:x86
a4d923da35776feb7e609ccb48cc0361
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
gdi32
GetGlyphOutlineW
PolyPolygon
PathToRegion
SetMetaFileBitsEx
SelectObject
AnimatePalette
ScaleWindowExtEx
GetFontData
GetMapMode
GetDeviceCaps
GetBrushOrgEx
GetRandomRgn
SetEnhMetaFileBits
GetTextColor
GetEnhMetaFileDescriptionA
Polyline
EnumFontsW
SaveDC
CreateRoundRectRgn
FrameRgn
DPtoLP
ExtEscape
GetOutlineTextMetricsA
CreateDIBPatternBrushPt
advapi32
LookupPrivilegeValueA
CreateServiceA
LookupPrivilegeDisplayNameA
RegOpenKeyW
RegQueryInfoKeyW
CryptSetProviderW
CryptAcquireContextA
CryptHashData
RegEnumKeyA
RegQueryMultipleValuesA
wininet
InternetTimeFromSystemTimeA
InternetGetConnectedStateExW
InternetWriteFile
InternetOpenUrlW
SetUrlCacheGroupAttributeW
DeleteUrlCacheContainerA
kernel32
GetStartupInfoA
GetModuleFileNameW
SetConsoleCtrlHandler
LCMapStringA
VirtualAlloc
GetConsoleOutputCP
CreateMutexA
GetStringTypeW
LCMapStringW
InterlockedExchange
GetTickCount
GetTimeZoneInformation
WriteFile
FreeLibrary
GetCurrentProcessId
GetModuleFileNameA
InterlockedDecrement
GetACP
GetCommandLineW
GetConsoleCP
HeapAlloc
UnhandledExceptionFilter
GetCPInfo
SetUnhandledExceptionFilter
HeapReAlloc
GetTimeFormatA
Sleep
MultiByteToWideChar
GetModuleHandleW
InterlockedIncrement
TlsAlloc
TlsSetValue
GetDateFormatA
SetStdHandle
SetEnvironmentVariableA
GetEnvironmentStringsW
CompareStringA
IsDebuggerPresent
VirtualQuery
CompareStringW
lstrcpynW
WideCharToMultiByte
GetOEMCP
SetFilePointer
EnterCriticalSection
ExitProcess
GetLocaleInfoA
RtlUnwind
HeapCreate
GetProcAddress
GetCommandLineA
SetHandleCount
GetCurrentProcess
IsValidLocale
GetFileType
HeapDestroy
CreateFileA
FlushFileBuffers
CloseHandle
GetStartupInfoW
GetCurrentThreadId
OpenMutexA
LoadLibraryA
GetSystemTimeAsFileTime
GetStringTypeA
ReadFile
SetLastError
HeapFree
GetLastError
TlsGetValue
GetUserDefaultLCID
InitializeCriticalSectionAndSpinCount
WriteConsoleW
EnumSystemLocalesA
GetLocaleInfoW
GetCurrentThread
DeleteCriticalSection
GetConsoleMode
FreeEnvironmentStringsW
LeaveCriticalSection
TlsFree
HeapSize
VirtualFree
GetStdHandle
WriteConsoleA
GetModuleHandleA
QueryPerformanceCounter
TerminateProcess
IsValidCodePage
shell32
ExtractAssociatedIconExW
SHAppBarMessage
SheGetDirA
SHFileOperationA
user32
EmptyClipboard
DdeInitializeW
RegisterClassA
MapDialogRect
DlgDirListW
SetMessageExtraInfo
SetClassLongW
AdjustWindowRectEx
InSendMessage
RegisterClassExA
UnhookWinEvent
UnregisterDeviceNotification
GetSystemMetrics
GetMenuItemRect
LoadMenuW
MapVirtualKeyExA
SetScrollPos
ChangeDisplaySettingsA
LoadCursorFromFileW
CharUpperBuffW
IsDlgButtonChecked
GetWindowContextHelpId
Sections
.text Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 66KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ