Static task
static1
Behavioral task
behavioral1
Sample
3fdc4810e912789192a9bb43f8a465c456fbcc91f2875f7bc56a0295ec34ccff.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3fdc4810e912789192a9bb43f8a465c456fbcc91f2875f7bc56a0295ec34ccff.exe
Resource
win10v2004-20240226-en
General
-
Target
3fdc4810e912789192a9bb43f8a465c456fbcc91f2875f7bc56a0295ec34ccff
-
Size
154KB
-
MD5
255484f85cb3d2cb56bd482c05c13378
-
SHA1
8ac2238fe14a7a9d011c5eede761cbb3ddf376bf
-
SHA256
3fdc4810e912789192a9bb43f8a465c456fbcc91f2875f7bc56a0295ec34ccff
-
SHA512
a0566c57f18733ea68a8c5f5a438017c620768a8a4ce33ec5b2fb9054587a517a6c2fd03065f5169eb741b14211c0d7757b35d62ec91bed825e0991d572eb98a
-
SSDEEP
3072:+VbwSqv3Xa+SVe4sULUgueNUTs/glCLQ3mhcfxggjcoEGzh:IwSqPK+QeRqDrTywQ2hcfxgjojzh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fdc4810e912789192a9bb43f8a465c456fbcc91f2875f7bc56a0295ec34ccff
Files
-
3fdc4810e912789192a9bb43f8a465c456fbcc91f2875f7bc56a0295ec34ccff.exe windows:1 windows x86 arch:x86
a49d6f7f863223661bb1a0a572a10187
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathFileExistsW
user32
DrawAnimatedRects
FindWindowA
GetWindowTextA
KillTimer
SetFocus
SetTimer
GetWindowRect
ole32
CoInitialize
CoUninitialize
ws2_32
WSACleanup
WSAStartup
kernel32
CloseHandle
CreateEventW
CreateFileA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
LoadLibraryA
QueryPerformanceCounter
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VirtualProtect
lstrcpyW
lstrlenA
iphlpapi
GetAdaptersInfo
ntdll
RtlNtStatusToDosError
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
gdi32
DeleteObject
SelectObject
SetTextColor
CreateFontIndirectA
Sections
AUTO Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DGROUP Size: 115KB - Virtual size: 349KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ