?N_SLL_DK_QBengsdxtC@@YGPAHPAMPAF@Z
Static task
static1
Behavioral task
behavioral1
Sample
3e413602075defb5ecbde57f5e9ee5c1.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3e413602075defb5ecbde57f5e9ee5c1.exe
Resource
win10v2004-20231222-en
General
-
Target
3e413602075defb5ecbde57f5e9ee5c1
-
Size
136KB
-
MD5
3e413602075defb5ecbde57f5e9ee5c1
-
SHA1
32ac3baedaf35ded71fe4fe1c6c864a48430f7aa
-
SHA256
ef9e9b370c041cba4579a2038735ace6ee90c5dc2c4e01d1ede325360ca02b5e
-
SHA512
d8e7332aba0c14e9f73efe4cdf270a7e011e9ac5540acd0b1a72da7d37522a2c78c3c09287497d6c4fbaefbe6d8b2cfc3a89f31aca8852d35f5977666eed87d2
-
SSDEEP
3072:0fJjU+umR5K090+7X6uJ8mp6pIYS0N31ATw3+xe6beuygME:0NUM5K09jgTxAlbew
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e413602075defb5ecbde57f5e9ee5c1
Files
-
3e413602075defb5ecbde57f5e9ee5c1.exe windows:5 windows x86 arch:x86
e21c70c89ef17bab267b2565024e527f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
Rectangle
GetDIBits
CreateHatchBrush
TranslateCharsetInfo
ResizePalette
GetBkMode
Polygon
LineTo
EnumFontFamiliesExW
CreateBrushIndirect
CreateDIBSection
CreateDCW
GetSystemPaletteUse
comdlg32
PageSetupDlgW
GetFileTitleW
ChooseFontW
GetOpenFileNameA
shlwapi
PathRelativePathToA
UrlGetPartA
kernel32
CreateEventW
GetComputerNameExW
HeapAlloc
lstrlenA
GetModuleHandleA
DeleteAtom
CreateWaitableTimerA
GetSystemTimeAdjustment
GetCommandLineA
lstrcmpA
HeapUnlock
FindResourceW
SetCommBreak
GetThreadPriority
GetStringTypeExW
GetModuleFileNameA
FoldStringW
ntdll
memset
user32
ShowOwnedPopups
CharLowerA
SetCursor
EnumThreadWindows
GetMenu
GetClassInfoExW
GetShellWindow
GetIconInfo
KillTimer
GetClassNameW
LoadMenuW
IsWindow
ChildWindowFromPointEx
FindWindowExA
GetWindowRect
GetMessageExtraInfo
GetUserObjectInformationA
SetWindowPlacement
CheckDlgButton
CreateIconFromResource
GetMenuStringW
SwitchToThisWindow
GetActiveWindow
GetMessagePos
GetDlgCtrlID
SetRect
SetForegroundWindow
CallWindowProcA
msvcrt
exit
Exports
Exports
Sections
.text Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 512B - Virtual size: 292B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 201B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.$debug Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data2 Size: 512B - Virtual size: 504B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data3 Size: 1024B - Virtual size: 529B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data4 Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ