Static task
static1
Behavioral task
behavioral1
Sample
3ed283fb48d691863e7fc31f0262dedd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ed283fb48d691863e7fc31f0262dedd.exe
Resource
win10v2004-20231215-en
General
-
Target
3ed283fb48d691863e7fc31f0262dedd
-
Size
46KB
-
MD5
3ed283fb48d691863e7fc31f0262dedd
-
SHA1
00fd8833b7002158dfb3e524bf0346415a86f06a
-
SHA256
daaa9354a7e66a3cacbb073284f052ac1da1977f0c330b2c9bd91ddb09de1677
-
SHA512
033940bcdee1c645beb7ab0024c92ee0d092e41d434f1a2cfa237f237124d455b772bbf3dc6c0f1e85ff4552b33eadcebc7bee8aebfc0491db605bb03586cd2d
-
SSDEEP
768:Y+gofZsxqZQnwqOj+nur6YRSnwn2RRYsFE7qbtsDkc9LHBs8PTgnwkdSmXLH:k0sMZ6rQ+nur6YRS6LCmqhslNHLgwkQm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ed283fb48d691863e7fc31f0262dedd
Files
-
3ed283fb48d691863e7fc31f0262dedd.exe windows:5 windows x86 arch:x86
9843e070c6bebc3979beae599d7e3712
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetCursorPos
GetKeyboardState
PeekMessageW
OpenWindowStationA
GetMessageA
GetForegroundWindow
GetDlgItemTextW
CloseDesktop
CloseWindowStation
GetDlgItem
MsgWaitForMultipleObjects
GetIconInfo
GetMessageW
CharLowerBuffA
SetProcessWindowStation
SendMessageW
DispatchMessageW
EndDialog
OpenDesktopA
GetDlgItemTextA
LoadCursorW
GetWindowThreadProcessId
GetWindowTextW
SetThreadDesktop
GetKeyState
GetClipboardData
FindWindowExW
GetWindowLongW
GetClassNameW
DrawIcon
PeekMessageA
ToUnicode
ExitWindowsEx
kernel32
SetEvent
HeapReAlloc
SystemTimeToFileTime
lstrlenW
HeapAlloc
GlobalUnlock
HeapFree
WideCharToMultiByte
OpenMutexW
MultiByteToWideChar
GetLocalTime
CreateDirectoryW
FindClose
lstrcmpiW
ExpandEnvironmentStringsW
Sleep
ReadFile
GlobalLock
lstrcatW
LeaveCriticalSection
GetCommandLineA
FindFirstFileW
SetFileTime
GetSystemTime
IsBadReadPtr
GetCurrentThreadId
MapViewOfFile
GetCurrentProcessId
lstrcpyW
ReleaseMutex
WaitForSingleObject
InitializeCriticalSection
GetComputerNameW
GetVersionExW
CreateFileMappingW
GetLogicalDrives
WriteFile
MoveFileExW
WriteProcessMemory
lstrcpyA
GetProcessTimes
SetThreadPriority
CreateMutexW
GetFileSizeEx
FindNextFileW
GetSystemTimeAsFileTime
GetModuleFileNameA
GetExitCodeProcess
CreateThread
GetFileTime
CreateFileW
CloseHandle
GetModuleHandleA
GetProcessHeap
GetLastError
GetDriveTypeW
CopyFileW
Sections
.wpod Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.yjcv Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vip Size: 7KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ