Behavioral task
behavioral1
Sample
3e7a34cb73710caa56f4bf124bdc8b1b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3e7a34cb73710caa56f4bf124bdc8b1b.exe
Resource
win10v2004-20231215-en
General
-
Target
3e7a34cb73710caa56f4bf124bdc8b1b
-
Size
148KB
-
MD5
3e7a34cb73710caa56f4bf124bdc8b1b
-
SHA1
ea08bc4ec0ca7f47c1621e85cc9f1260529d9dd7
-
SHA256
3f78f8329b1068a1817b254601d1e3f49a4e91407e8df9362d6b7db82d823427
-
SHA512
55d257281ead0241010fc1c01f7be0fb07f47b2cee986304a6272291974364c0de045e481a44bec50bf430ca2d07bfd028355d26ba6618759b63b6ea03188a9f
-
SSDEEP
1536:G6lnivVXnqUGH653WEAPOp58lxMns/s/aANNiKb:G3nqUGI35APgWln/s/aENiKb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e7a34cb73710caa56f4bf124bdc8b1b
Files
-
3e7a34cb73710caa56f4bf124bdc8b1b.exe windows:4 windows x86 arch:x86
8219f7986415a2e7c3367a95ccfdc912
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadResource
LockResource
MapViewOfFile
LoadLibraryA
MultiByteToWideChar
OpenProcess
SetCurrentDirectoryA
SetEndOfFile
Sleep
HeapFree
HeapReAlloc
GetLocalTime
_lclose
_lcreat
_llseek
_lopen
lstrcatA
GetDriveTypeA
lstrcpyA
lstrcpynA
lstrlenA
HeapAlloc
GetWindowsDirectoryA
GetVersionExA
GetSystemDirectoryA
GetProcessHeap
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
UnmapViewOfFile
_hread
_hwrite
CreateDirectoryA
CreateFileMappingA
lstrcmpA
CloseHandle
CreateThread
ExitProcess
FindClose
GetEnvironmentVariableA
FindFirstFileA
FindResourceA
GetCommandLineA
GetCurrentDirectoryA
GetCurrentProcessId
advapi32
RegEnumKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
RegCreateKeyExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
GetUserNameA
comctl32
InitCommonControls
gdi32
CreateFontA
CreateBrushIndirect
CreatePen
GetStockObject
GetTextExtentPoint32A
Rectangle
SelectObject
SetBkMode
SetDIBitsToDevice
SetTextColor
ole32
CoUninitialize
CoInitialize
CoCreateInstance
shell32
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHBrowseForFolderA
user32
SetFocus
SetTimer
SetWindowPos
SetWindowTextA
ShowWindow
SetCursor
TranslateMessage
MapDialogRect
LoadIconA
LoadCursorA
KillTimer
InvalidateRect
GetWindowTextA
SendMessageA
SetCapture
GetDialogBaseUnits
FindWindowA
ExitWindowsEx
EndPaint
EndDialog
EnableWindow
DispatchMessageA
DialogBoxParamA
DestroyWindow
DefWindowProcA
CreateWindowExA
ClientToScreen
BeginPaint
wsprintfA
ReleaseCapture
RegisterClassExA
PtInRect
PostQuitMessage
MessageBoxA
GetDlgItem
GetDlgCtrlID
GetMessageA
GetSystemMetrics
FindWindowExA
GetDC
Sections
UPX0 Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE