Static task
static1
Behavioral task
behavioral1
Sample
c3ed691fdc63a6edfba49a7173c2520b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c3ed691fdc63a6edfba49a7173c2520b.exe
Resource
win10v2004-20231215-en
General
-
Target
c3ed691fdc63a6edfba49a7173c2520b
-
Size
43KB
-
MD5
c3ed691fdc63a6edfba49a7173c2520b
-
SHA1
6ae2088f7fffa4d81f05b1123f23d0a3057a3b57
-
SHA256
079f1db77326185fc1afa4cc6906baa86cf8e07fea78c8497bdc9d99f9d3c51b
-
SHA512
3fba636c855ed74edaf3bb185df16c4fda268e74db5eb2bc33321765783f561e1c899746694dfffc183e980c23d749b9ffe78f1d9b5cf07b5c2e7775b1521a5e
-
SSDEEP
768:IsAr8KlF50zggVCiZ/AJqxie3RK7wrucN53PcIMVVFMhzJ5l36CfnCIP:rArb5WgsCiZoJq4e3RKcrucN53PcIUnY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c3ed691fdc63a6edfba49a7173c2520b
Files
-
c3ed691fdc63a6edfba49a7173c2520b.exe windows:4 windows x86 arch:x86
24c882870ffb26ff7410d2f030f8c8e4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMailslotA
CreateThread
CreateToolhelp32Snapshot
EnumCalendarInfoA
EnumCalendarInfoW
EnumSystemCodePagesW
ExitProcess
GetConsoleScreenBufferInfo
GetProcessHeaps
GetProcessTimes
GetVersionExW
GlobalGetAtomNameA
HeapValidate
MoveFileExA
OpenSemaphoreA
PeekConsoleInputW
RaiseException
ReadConsoleW
SetComputerNameA
SetConsoleOutputCP
SetSystemTime
WaitForMultipleObjectsEx
user32
DdeFreeDataHandle
DdeFreeStringHandle
DlgDirSelectComboBoxExW
DrawIcon
DrawIconEx
EnumClipboardFormats
ExitWindowsEx
FindWindowW
GetClassInfoExW
GetGUIThreadInfo
GetListBoxInfo
GetMenuContextHelpId
GetTitleBarInfo
IMPQueryIMEW
IsCharAlphaNumericA
IsCharLowerA
LoadAcceleratorsW
MessageBoxIndirectA
MessageBoxIndirectW
ScrollWindow
SetScrollRange
SetWinEventHook
SetWindowPlacement
gdi32
AbortDoc
AddFontResourceA
BeginPath
CreateBrushIndirect
CreateDIBSection
CreateFontIndirectA
CreatePalette
DeleteObject
DrawEscape
EndPath
EnumFontFamiliesExA
GetClipBox
GetColorSpace
GetEnhMetaFileHeader
GetMiterLimit
GetPath
GetStretchBltMode
GetTextCharsetInfo
OffsetRgn
PolyTextOutW
ResetDCA
RoundRect
SelectPalette
SetBitmapDimensionEx
SetWindowOrgEx
StartDocW
SwapBuffers
TextOutW
gdiPlaySpoolStream
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 42KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE