Static task
static1
Behavioral task
behavioral1
Sample
3e44bc3a855dec136c5432a79b42ec39.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3e44bc3a855dec136c5432a79b42ec39.exe
Resource
win10v2004-20231215-en
General
-
Target
3e44bc3a855dec136c5432a79b42ec39
-
Size
80KB
-
MD5
3e44bc3a855dec136c5432a79b42ec39
-
SHA1
ed88c0c50d3a226477346ec0c07d42cd4ebc7c0e
-
SHA256
a1c4d7363b5bc55af93ae1ba2ba38f577b78aeaf28d97fca2b0fd56292a8ac8c
-
SHA512
5fbb7341a5bb64e0fadaccac0514f71a03aa3a3e41e33f4ed42da4c1034bbd1d8638841c66ef75266ab75b11d26d1c834d193d927dccd2602be4c9076e901a84
-
SSDEEP
768:Crh7bTeHN/DVxDRSwzDQcbxQRYgSpPKe6CHpIe5vZk8u6tRTkpJRtYtdAlX:CMHNZS28seRHSpfPX3NtRTsLWEZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e44bc3a855dec136c5432a79b42ec39
Files
-
3e44bc3a855dec136c5432a79b42ec39.exe windows:4 windows x86 arch:x86
93b4e13b2d3c6bf740bac3dd06267611
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
AppendMenuA
CalcMenuBar
GetCursor
IsMenu
DrawIconEx
AlignRects
AppendMenuW
GetFocus
IsWindow
BlockInput
GetDlgItem
EndDialog
CopyIcon
DrawTextW
CloseWindow
AppendMenuA
CopyImage
GetCursor
DialogBoxParamW
InsertMenuA
AlignRects
GetDC
CalcMenuBar
GetWindowTextA
GetMenu
EndDialog
AppendMenuW
GetFocus
IsMenu
GetMenu
DrawTextA
DrawIcon
CalcMenuBar
InsertMenuA
GetCursor
CopyImage
IsMenu
CreateIcon
CloseWindow
LoadCursorA
GetDC
GetWindowTextLengthA
CopyRect
kernel32
Sleep
CreateDirectoryA
SetLastError
OpenFileMappingA
FindAtomA
DeleteAtom
DeleteFileA
CopyFileA
CopyFileExW
GetFileTime
DeleteFileW
CreateProcessA
GetFileSize
GlobalFree
ReadConsoleA
GetCPInfo
CopyFileA
Sleep
GetConsoleMode
FindFirstFileA
CopyFileExW
ReadConsoleA
WriteFile
GetFileTime
OpenFileMappingA
GetLastError
CreateDirectoryA
CopyFileExW
DeleteAtom
SetLastError
DeleteFileA
ReadFile
GetFileSize
GetCommandLineA
CreateDirectoryA
GetLastError
WriteFile
GetFileTime
GlobalFree
CreateProcessA
CreateThread
GetStdHandle
GetConsoleMode
CopyFileExA
Sections
CODE Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.gadata Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qdata Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ