Static task
static1
Behavioral task
behavioral1
Sample
3f78158cd6a82f71a195c15dafed8533.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3f78158cd6a82f71a195c15dafed8533.exe
Resource
win10v2004-20231215-en
General
-
Target
3f78158cd6a82f71a195c15dafed8533
-
Size
45KB
-
MD5
3f78158cd6a82f71a195c15dafed8533
-
SHA1
09228e3be773530dc621897208ed5699fff057c3
-
SHA256
6d003364c086f15fd5ad07b76c8cee9f22fe8638d59ed151a6d13a4a43921050
-
SHA512
3e4459843cf067e28b7ea20785d4616e395504261ecc854b8434ded3e141d00d363d3345e65176344164e01b79e82030e6fec213d6fd443ee9d8cdb49c2f0b66
-
SSDEEP
768:J3l3o3G3BtiQ47zO7vD/6sjDzGDf031ZgeNaZJp41sDzTY99u9fR8teN2kfO6F:J3l3o3G3BbDXz8f0leec01WgyJXxh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f78158cd6a82f71a195c15dafed8533
Files
-
3f78158cd6a82f71a195c15dafed8533.exe windows:4 windows x86 arch:x86
c0d5a15991fbbee70da0f6fdf7e75a36
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
CreateFileA
FindAtomA
lstrcmpA
lstrlenA
GetModuleFileNameA
lstrcpynA
CreateMutexA
CloseHandle
GetVersion
GetTickCount
GetTempPathA
GetSystemTime
WriteFile
lstrcpyA
GetCommandLineA
CreateProcessA
lstrcatA
GetLastError
GetProcAddress
VirtualAlloc
GetTempFileNameA
GetLocalTime
LoadLibraryA
OpenMutexA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
VirtualQuery
GetVersionExA
RtlUnwind
IsDebuggerPresent
user32
wsprintfA
ClientToScreen
GetCursorPos
GetCaretPos
EqualRect
GetWindowRect
IsWindowVisible
GetFocus
InflateRect
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE