Static task
static1
Behavioral task
behavioral1
Sample
3fabcb3dcde9fd2e63ba846390228f73.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3fabcb3dcde9fd2e63ba846390228f73.exe
Resource
win10v2004-20231215-en
General
-
Target
3fabcb3dcde9fd2e63ba846390228f73
-
Size
9.8MB
-
MD5
3fabcb3dcde9fd2e63ba846390228f73
-
SHA1
b5787bb6cd47202d1fb83f5659d7b1d95fef8f5c
-
SHA256
5a55ac0a25cfa287b46d2e18b6d3d159f9b2f9da124d12f5f3e83f8206d1c79a
-
SHA512
8178593e92a30b939767a4953bff08be7ee5663fd93eae0ca88d0c6dd0d6929fd1d09b875d44b444fad5eaeaf31af5b64111e79c412dbad77e937f5653e46597
-
SSDEEP
196608:sqvaAGb05RxwRw9Q+9L1xxFPoYdtM/tidNbTr/TKcdSfaENO42XUJqWv:sUaAGqRxTjFQYdtEf2X8rv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fabcb3dcde9fd2e63ba846390228f73
Files
-
3fabcb3dcde9fd2e63ba846390228f73.exe windows:4 windows x86 arch:x86
773d47e200c6b235165f85aeab9448a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
ExitProcess
advapi32
RegCreateKeyA
gdi32
CreateCompatibleDC
user32
MessageBoxA
version
GetFileVersionInfoA
imm32
ImmGetConversionStatus
shell32
ShellExecuteA
ole32
CoCreateInstance
oleaut32
VariantInit
koeids
DSoundOpenMMIOFile
koeilw
_LW_MemoryDecode@24
d3d8
Direct3DCreate8
winmm
timeGetTime
psrpc
ord89
var_conv
ord41
httpfile
ord9
Sections
.text Size: 7.3MB - Virtual size: 7.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 948KB - Virtual size: 947KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 764KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 772KB - Virtual size: 770KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
stxt774 Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
stxt371 Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.. Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE