Static task
static1
Behavioral task
behavioral1
Sample
3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3.exe
Resource
win10v2004-20231222-en
General
-
Target
3.exe
-
Size
196KB
-
MD5
7997bf5c72cd4e3365614a46b11a05c1
-
SHA1
161c837a29e1ff6712db8d129ff6f764aaa82277
-
SHA256
4ef8a2e1e9f6e0668a193bc7d5c2b59173c9a7ece119abe0eb8d937ce531588e
-
SHA512
5f1cd101f72d57443ddf9702fad02a04029e146c4363a06cb486efda88a1ca15a3af42aa2167c3cbc43a0692ef489acb5da7b89803e1a3cb67e76208d954dab6
-
SSDEEP
3072:EMJRZgeRnhwOkl+HxfFAcnK7bBY9i0uXUtAEcV3eXAg0FujmDWw3Egh49wIz:EEaSjNRfFZmy959AO8bf+9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3.exe
Files
-
3.exe.exe windows:6 windows x86 arch:x86
3b7000d10ad87b55904017fc68940ea4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
advapi32
RegSetValueExW
RegOpenKeyExW
RegCloseKey
kernel32
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
SetStdHandle
GetFileType
FreeEnvironmentStringsW
CreateFileW
CloseHandle
FlushFileBuffers
LCMapStringW
lstrlenW
GetModuleFileNameW
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
GetSystemDefaultUILanguage
ExitProcess
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
SetLastError
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
HeapReAlloc
HeapFree
GetCurrentThreadId
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
FreeLibrary
GetProcAddress
LoadLibraryExW
WriteConsoleW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
GetModuleHandleW
GetModuleHandleExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
HeapSize
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
InitializeSListHead
RtlUnwind
RaiseException
EncodePointer
LCMapStringEx
InitializeCriticalSectionEx
DecodePointer
CompareStringEx
GetEnvironmentStringsW
GetStdHandle
WriteFile
FindClose
FindFirstFileExW
FindNextFileW
GetCommandLineA
GetCommandLineW
Sections
.text Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ