Static task
static1
Behavioral task
behavioral1
Sample
3f6d72ea1d5ea8e6caddb3591ed3d5f4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3f6d72ea1d5ea8e6caddb3591ed3d5f4.exe
Resource
win10v2004-20231215-en
General
-
Target
3f6d72ea1d5ea8e6caddb3591ed3d5f4
-
Size
268KB
-
MD5
3f6d72ea1d5ea8e6caddb3591ed3d5f4
-
SHA1
121085526309da296162fa41757ca981359d6dec
-
SHA256
01bd6f2f20c8465117f3938b1e4d1b4d70496ced89318941645ba684eefc212e
-
SHA512
5915353f5f6045ad5979d348c6e070d053a5bb24c3a2c8f037b522872c88fd19552a529e0cd764b6f5617415166ef2de542600c291056b4ab1e31b9417d40870
-
SSDEEP
6144:7HD/PNK2Thhg+zyUIGqf1cukUuAVF0isM1g0:7HrPNKNtxGgtXdsM1g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f6d72ea1d5ea8e6caddb3591ed3d5f4
Files
-
3f6d72ea1d5ea8e6caddb3591ed3d5f4.exe windows:4 windows x86 arch:x86
5ad84546f1e3273d35a13d69c180b7c9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
CreateSemaphoreA
InitializeCriticalSection
FreeLibrary
VirtualFree
lstrlenW
GetModuleFileNameA
GetLastError
VirtualAlloc
GetModuleHandleA
VirtualQuery
DeleteFileA
ReadFile
CreateFileA
LocalAlloc
FreeResource
SizeofResource
GetCurrentThread
LoadResource
FindResourceExA
VirtualProtect
HeapAlloc
GetSystemInfo
HeapCreate
InterlockedDecrement
GlobalFree
WriteFile
GlobalAlloc
LoadLibraryA
SystemTimeToFileTime
GetSystemTime
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
GetStartupInfoA
DebugBreak
HeapReAlloc
HeapFree
SetEvent
GetProcAddress
SetThreadPriority
ExitProcess
GetCommandLineA
GetCurrentThreadId
lstrcmpiA
Sleep
CreateEventA
CreateThread
WaitForSingleObject
CloseHandle
LockResource
user32
LoadCursorA
UpdateWindow
ShowWindow
CreateWindowExA
PostQuitMessage
EndPaint
DrawTextA
GetClientRect
BeginPaint
RegisterClassExA
DestroyWindow
LoadAcceleratorsA
EndDialog
IsWindowVisible
UnregisterClassA
PeekMessageA
TranslateMessage
EnumDisplaySettingsA
DefWindowProcA
LoadStringA
CharNextA
DispatchMessageA
GetMessageA
DestroyIcon
TranslateAcceleratorA
GetDesktopWindow
DialogBoxParamA
GetDC
LoadBitmapA
DrawIcon
LoadIconA
PostThreadMessageA
gdi32
CreateCompatibleBitmap
GetDIBits
GetDeviceCaps
GetObjectA
shell32
ExtractIconA
ole32
CoInitialize
CoUninitialize
CoCreateInstance
oleaut32
VariantClear
VariantInit
atl
ord17
ord23
ord57
ord18
ord16
ord21
ord20
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 211KB - Virtual size: 811KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lsdb Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE