Static task
static1
Behavioral task
behavioral1
Sample
3f5150071c3d150a05841d0441146f3d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3f5150071c3d150a05841d0441146f3d.exe
Resource
win10v2004-20231215-en
General
-
Target
3f5150071c3d150a05841d0441146f3d
-
Size
167KB
-
MD5
3f5150071c3d150a05841d0441146f3d
-
SHA1
f2e83d34bb89b1e6bf94cb4f15f5e6a1e5385c2d
-
SHA256
af7453257601177a1f14dcb97ad0bbfafbf248c47eb03d7c591c2b86f3fa7647
-
SHA512
003972fa47abc8db1a96eca81001ce799bc48abbe51ad0d3d55195d4a6df0c957c20fa3644270f2a81ebe7ed72fda560d16136bc95290e163835ff4253f1710b
-
SSDEEP
3072:VBJE40+j3315rZhom7jhG6Wt800j9a1HBA+iZ7I:fCF+/XoVGHj9Qhu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f5150071c3d150a05841d0441146f3d
Files
-
3f5150071c3d150a05841d0441146f3d.exe windows:4 windows x86 arch:x86
01ebfe6f94a76a3d23ee96152419f618
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClientRect
GetMenuItemID
MapVirtualKeyA
ScrollWindow
GetCapture
SetScrollInfo
SetClipboardData
GetCursor
SetForegroundWindow
CallNextHookEx
IsRectEmpty
GetWindowDC
SystemParametersInfoA
DrawEdge
PeekMessageA
SetRect
DrawIcon
EnumChildWindows
RemovePropA
ClientToScreen
DispatchMessageA
EndPaint
GetSystemMenu
UpdateWindow
GetParent
GetScrollPos
OffsetRect
EnableScrollBar
CharNextA
GetTopWindow
SetCapture
SetWindowLongA
SetWindowPlacement
GetWindowPlacement
ShowWindow
IsIconic
InvalidateRect
LoadBitmapA
EnableMenuItem
DestroyCursor
DrawFrameControl
KillTimer
GetDC
GetClassNameA
CreatePopupMenu
LoadKeyboardLayoutA
GetIconInfo
DrawAnimatedRects
CheckMenuItem
CharLowerBuffA
PeekMessageW
BeginPaint
FillRect
GetDlgItem
GetMenuItemCount
SetParent
GetScrollInfo
MessageBoxA
SetPropA
DrawMenuBar
DrawIconEx
SetClassLongA
CloseClipboard
CreateMenu
SetCursor
IsWindowEnabled
CharLowerA
GetPropA
PtInRect
SetScrollRange
CharNextW
TranslateMDISysAccel
CreateWindowExA
CallWindowProcA
MessageBeep
DefFrameProcA
CharUpperBuffA
wsprintfA
IsChild
SendMessageA
FindWindowA
ChildWindowFromPoint
AdjustWindowRectEx
OpenClipboard
DestroyMenu
GetWindow
UnhookWindowsHookEx
TrackPopupMenu
DispatchMessageW
WindowFromPoint
GetLastActivePopup
GetForegroundWindow
SetActiveWindow
ReleaseDC
GetMenuStringA
ShowOwnedPopups
LoadIconA
CreateIcon
IsDialogMessageA
ActivateKeyboardLayout
GetWindowLongW
IntersectRect
GetKeyboardType
LoadCursorA
GetKeyState
GetSubMenu
IsDialogMessageW
InsertMenuA
InsertMenuItemA
RegisterClassA
EnumWindows
GetMenuItemInfoA
EnumThreadWindows
SetWindowsHookExA
EmptyClipboard
MoveWindow
GetFocus
LoadStringA
GetClipboardData
GetSystemMetrics
SetWindowTextA
GetDCEx
PostMessageA
SetMenuItemInfoA
RemoveMenu
DestroyWindow
IsWindow
GetKeyboardLayoutList
ScreenToClient
IsWindowVisible
GetMenu
PostQuitMessage
GetKeyboardLayoutNameA
GetDesktopWindow
GetSysColorBrush
ReleaseCapture
GetWindowLongA
UnregisterClassA
GetClassInfoA
ShowScrollBar
WaitMessage
GetWindowRect
CharToOemA
DefWindowProcA
SendMessageW
GetActiveWindow
GetKeyNameTextA
SetScrollPos
MapWindowPoints
FrameRect
MsgWaitForMultipleObjects
IsZoomed
SetMenu
DefMDIChildProcA
RegisterClipboardFormatA
EnableWindow
SetWindowPos
RedrawWindow
EqualRect
RegisterWindowMessageA
OemToCharA
GetKeyboardState
GetMessagePos
DeleteMenu
TranslateMessage
GetMenuState
DrawTextA
GetClassLongA
SetTimer
GetScrollRange
msvcrt
sin
memmove
memcpy
wcstol
kernel32
WideCharToMultiByte
lstrcpyA
GetStartupInfoA
ExitProcess
GetLocalTime
MulDiv
EnumCalendarInfoA
LoadLibraryExA
GetVersion
VirtualFree
GetFileAttributesA
ResetEvent
GetCPInfo
GetCurrentProcess
GetFileSize
lstrcpynA
GetDiskFreeSpaceA
LockResource
lstrlenA
GetModuleHandleA
GetTickCount
FindClose
CreateEventA
WaitForSingleObject
GlobalAlloc
GetProcessHeap
GetFileType
FreeLibrary
GetModuleFileNameA
GetLastError
MoveFileExA
LoadResource
GetDateFormatA
GetOEMCP
GlobalAddAtomA
GetEnvironmentStrings
DeleteCriticalSection
lstrcmpiA
GetFullPathNameA
CreateThread
MoveFileA
SetHandleCount
SetEvent
ExitThread
Sleep
GetUserDefaultLCID
VirtualQuery
ReadFile
SetErrorMode
GlobalDeleteAtom
GetCurrentThread
GetSystemDefaultLangID
FormatMessageA
LoadLibraryA
GetVersionExA
EnterCriticalSection
SetLastError
GetThreadLocale
GetCurrentThreadId
LocalAlloc
HeapFree
WriteFile
FindResourceA
lstrcatA
HeapDestroy
SetEndOfFile
GetStringTypeA
CreateFileA
GetLocaleInfoA
GetCurrentProcessId
CompareStringA
GetACP
GetStdHandle
GetCommandLineA
lstrcmpA
FreeResource
GetStringTypeW
InitializeCriticalSection
LocalReAlloc
VirtualAlloc
DeleteFileA
RaiseException
FindFirstFileA
SetThreadLocale
SizeofResource
SetFilePointer
HeapAlloc
LocalFree
GlobalFindAtomA
Sections
.text Size: 155KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 7KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE