Static task
static1
Behavioral task
behavioral1
Sample
3e7da798964d0f6e3a00fe7ec7344d22.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3e7da798964d0f6e3a00fe7ec7344d22.exe
Resource
win10v2004-20231215-en
General
-
Target
3e7da798964d0f6e3a00fe7ec7344d22
-
Size
556KB
-
MD5
3e7da798964d0f6e3a00fe7ec7344d22
-
SHA1
64fe6b1b8980d8f044808c10fc7950d1f593e182
-
SHA256
b5ab2cbb721722384ec4a6952396461e1a8802787fc782a340397682d77b2503
-
SHA512
b3335721e3bea3d41fb82657f2e1ec60efbd331b1584c7234617440b43252fa8d8d7550d89f133548dcd9bcc0df782a14ec13b8ba2a7a4a88e710e3c65263c56
-
SSDEEP
12288:e2ilxIkAn7teVhBeIGNU4xEgh+ayBFFAZHUWnqxEveZ6:e2xkAnA+UiEgAaaSFJWZ6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e7da798964d0f6e3a00fe7ec7344d22
Files
-
3e7da798964d0f6e3a00fe7ec7344d22.exe windows:4 windows x86 arch:x86
fa20e9aa0116c75b37d1dd2ba1fe3301
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMenuItemCount
DeleteMenu
CallMsgFilter
CreateWindowStationW
PostMessageW
InvalidateRgn
EnumDisplaySettingsExW
FindWindowA
DefWindowProcA
OpenClipboard
DdeAbandonTransaction
SetMenu
GetIconInfo
RegisterClassA
CopyAcceleratorTableA
CheckRadioButton
CreateWindowExW
SwitchToThisWindow
EndMenu
GetAncestor
GetCaretPos
RegisterClassExA
DestroyCursor
MessageBoxW
GetKeyboardLayoutNameA
RemoveMenu
DefMDIChildProcA
DestroyWindow
InternalGetWindowText
SetWindowsHookExW
GetWindowModuleFileNameA
ShowWindow
wininet
SetUrlCacheEntryGroupW
shell32
DuplicateIcon
kernel32
GetCurrentDirectoryW
HeapAlloc
GetPrivateProfileSectionW
RtlMoveMemory
GetCPInfo
GetVersion
GetStringTypeA
WideCharToMultiByte
VirtualUnlock
SetConsoleOutputCP
GetCurrentThreadId
FindFirstFileExA
HeapCreate
LCMapStringW
UnhandledExceptionFilter
SetLastError
GetTimeZoneInformation
SetFileAttributesA
GetNumberFormatW
GetProcAddress
RtlFillMemory
HeapDestroy
GetPrivateProfileSectionA
ExitProcess
CreateMutexA
GetSystemTimeAsFileTime
GetLocalTime
GetLogicalDriveStringsW
HeapFree
WaitForMultipleObjectsEx
GetTickCount
InterlockedIncrement
LeaveCriticalSection
MoveFileExW
GetCurrentThread
GetTempPathA
VirtualQuery
WriteFile
LoadLibraryExA
GetFileType
RtlUnwind
HeapReAlloc
WritePrivateProfileSectionA
GetStartupInfoA
GetStdHandle
EnterCriticalSection
CloseHandle
ReadFile
GetEnvironmentStringsW
VirtualFree
InterlockedExchange
FreeEnvironmentStringsW
IsBadWritePtr
VirtualAlloc
GetOEMCP
WritePrivateProfileStructA
CompareStringW
DeleteCriticalSection
IsValidLocale
SetHandleCount
GetModuleHandleA
LCMapStringA
SetStdHandle
ConnectNamedPipe
LoadLibraryA
TlsFree
GetVolumeInformationA
GetWindowsDirectoryW
OpenMutexA
MultiByteToWideChar
CompareStringA
InterlockedDecrement
CreateProcessW
ReadConsoleW
CopyFileExA
FreeEnvironmentStringsA
SetEnvironmentVariableA
TlsAlloc
TlsGetValue
GetCurrentProcessId
SetFileAttributesW
TerminateProcess
FlushFileBuffers
GetLastError
GetStringTypeW
TlsSetValue
GetModuleFileNameA
InitializeCriticalSection
GetACP
QueryPerformanceCounter
GetSystemInfo
GetSystemTime
GetCommandLineA
SetFilePointer
ReadConsoleOutputW
GetFileTime
GetEnvironmentStrings
DosDateTimeToFileTime
GetCurrentProcess
SetWaitableTimer
comctl32
InitMUILanguage
ImageList_Write
ImageList_GetDragImage
ImageList_DrawEx
GetEffectiveClientRect
ImageList_GetImageRect
ImageList_Merge
ImageList_LoadImageW
InitCommonControlsEx
CreatePropertySheetPageW
ImageList_GetBkColor
Sections
.text Size: 148KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 248KB - Virtual size: 245KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ