Static task
static1
Behavioral task
behavioral1
Sample
c3aeaa75b4217b9ca7e49b3ddcd6f636.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c3aeaa75b4217b9ca7e49b3ddcd6f636.exe
Resource
win10v2004-20240226-en
General
-
Target
c3aeaa75b4217b9ca7e49b3ddcd6f636
-
Size
50KB
-
MD5
c3aeaa75b4217b9ca7e49b3ddcd6f636
-
SHA1
cab3ff4dee34dd0fc7d1b62a2e64c356ff2883a4
-
SHA256
d86c7a0b631b82d7f21e1c446936d20046e7a5e3d6e25721ad2e09e29e9562c6
-
SHA512
c10493214f7d3dd0ea5ac62a310deff87fa3f0a36661b20f755776038e7fea0230bad7935982bfc7404f04c131e3c74eeb0b3724009dc2cae03cd1f890a85f47
-
SSDEEP
768:hd75L8HDOan6lupkGue6pXnuRQwwUtCf38dLuLlXOHZpqEOnCSitMCdJZVV:XB8OVuHx6ts1CfMQLlXO59LTMAD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3aeaa75b4217b9ca7e49b3ddcd6f636
Files
-
c3aeaa75b4217b9ca7e49b3ddcd6f636.exe windows:5 windows x86 arch:x86
2b55c2d7a62f7bd02ab50f99fa5decce
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetConsoleTitleA
GetOverlappedResult
Heap32Next
HeapDestroy
MulDiv
OpenMutexW
PeekNamedPipe
QueryPerformanceFrequency
SetConsoleCtrlHandler
SetHandleContext
Thread32First
WaitNamedPipeA
WriteProfileStringA
lstrcmpiA
user32
CharToOemA
DdeAddData
DlgDirSelectExA
EnumDisplayMonitors
GetKBCodePage
GetMenu
IsCharLowerA
IsIconic
LoadCursorFromFileW
MenuItemFromPoint
MessageBoxIndirectA
NotifyWinEvent
RegisterClipboardFormatW
SetDlgItemInt
SetWindowPlacement
shell32
Control_FillCache_RunDLL
DllCanUnloadNow
DragQueryFile
PrintersGetCommand_RunDLLW
SHFileOperationA
SheChangeDirExA
SheGetDirW
ShellAboutW
gdi32
BitBlt
CopyEnhMetaFileW
CreateRectRgnIndirect
ExtCreateRegion
GetArcDirection
GetBitmapBits
GetKerningPairsA
GetLogColorSpaceA
GetMiterLimit
GetRasterizerCaps
PolyDraw
PolyPolyline
SetArcDirection
StretchDIBits
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 47KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE