Static task
static1
Behavioral task
behavioral1
Sample
3ec77484a3c3dbcb9f9088b476e513f7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ec77484a3c3dbcb9f9088b476e513f7.exe
Resource
win10v2004-20231215-en
General
-
Target
3ec77484a3c3dbcb9f9088b476e513f7
-
Size
630KB
-
MD5
3ec77484a3c3dbcb9f9088b476e513f7
-
SHA1
a713d5c08ef02541a1a27db5928914dc0a5d16ac
-
SHA256
8f261fb58bede6b93895b5b0aa6525163006b140f4db4216bbac8c1ef451789e
-
SHA512
9683ed9b7bed17b2d816f7a4f36623a5967505841b2c99b2b35705059594cfad0194992d30497be95d36d6d42063b411e8446289430ef9f405e89aedde09fecb
-
SSDEEP
12288:WW5/m2TTvOMiopZLVCmBAxhL6oz0sUJwXmeNf10zO3c5T6LGZXYSFkgBNSHQulE:WWVm2TSMHpZLV3AzL6oAJneEgEm6NSt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ec77484a3c3dbcb9f9088b476e513f7
Files
-
3ec77484a3c3dbcb9f9088b476e513f7.exe windows:4 windows x86 arch:x86
4c98f32b1af06f2deb4a2530e30517dc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
imagehlp
MapFileAndCheckSumA
shlwapi
PathCombineA
PathFindExtensionA
PathAppendA
PathRemoveExtensionA
PathStripPathA
kernel32
GetLastError
GetCommandLineA
GetModuleHandleA
ExitProcess
lstrcmpiA
lstrcpyA
lstrlenA
HeapAlloc
GetProcessHeap
HeapFree
RemoveDirectoryA
WaitForSingleObject
CreateProcessA
CloseHandle
GetFileAttributesA
lstrcatA
DeleteFileA
SetFilePointer
CreateFileA
CreateDirectoryA
GetModuleFileNameA
WideCharToMultiByte
MultiByteToWideChar
GetACP
ReadFile
GetTempFileNameA
GetTempPathA
WriteFile
user32
wsprintfA
SetDlgItemTextA
DestroyWindow
CreateDialogParamA
DispatchMessageA
TranslateMessage
IsDialogMessageA
GetMessageA
PeekMessageA
SendDlgItemMessageA
MessageBoxA
SetWindowTextA
shell32
SHFileOperationA
comctl32
InitCommonControlsEx
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ