Static task
static1
Behavioral task
behavioral1
Sample
3f00a9c4b14481bd86f8022e63eda48f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3f00a9c4b14481bd86f8022e63eda48f.exe
Resource
win10v2004-20231215-en
General
-
Target
3f00a9c4b14481bd86f8022e63eda48f
-
Size
197KB
-
MD5
3f00a9c4b14481bd86f8022e63eda48f
-
SHA1
3b61e596441bcbeb8176413e68a04f49a87b3366
-
SHA256
fb25db075a57a1a9c51115eaad1a8dc42f7f7344d8aedf1b864887b521b440c4
-
SHA512
f58fe438635e4ed27a7e7e595f0cf68c6454300f2df41875177607e3dd3652af4985b86cdcc8459e7c1535ae61aa2051bcaebf22cedb76454dd66cb79a7a42e2
-
SSDEEP
3072:O2VzMvCZU0OGReIhOJoA72uIiSjy3gm9FaXAnU3PXAvAm6mlzbl7735lNxlmSbR8:PrZUkReIh/o3zn1UfXAYhU3lXJ7xlm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f00a9c4b14481bd86f8022e63eda48f
Files
-
3f00a9c4b14481bd86f8022e63eda48f.exe windows:4 windows x86 arch:x86
3ddf85dd1411d5ac31102c1e53d43b2b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
ExitThread
FatalAppExitA
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
GetProcessWorkingSetSize
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GlobalLock
InterlockedDecrement
IsBadReadPtr
LCMapStringA
LoadLibraryA
QueryPerformanceCounter
ResumeThread
SetUnhandledExceptionFilter
TerminateThread
VirtualAlloc
VirtualProtect
WaitForSingleObject
lstrcatA
msvcrt
strncmp
strncat
strcpy
fwrite
fseek
wcschr
user32
SetClipboardData
SystemParametersInfoA
PostMessageA
LoadAcceleratorsA
InvalidateRgn
DefWindowProcA
CreateWindowExA
CloseClipboard
ModifyMenuA
comctl32
CreateStatusWindowA
DrawStatusTextA
InitCommonControls
MenuHelp
ShowHideMenuCtl
CreateMappedBitmap
Sections
.text Size: 74KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ