Static task
static1
Behavioral task
behavioral1
Sample
d3c0487a7557ec4751d81757b8cba89b.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d3c0487a7557ec4751d81757b8cba89b.exe
Resource
win10v2004-20240226-en
General
-
Target
d3c0487a7557ec4751d81757b8cba89b
-
Size
417KB
-
MD5
d3c0487a7557ec4751d81757b8cba89b
-
SHA1
eeffb579a2b32bbf7e320bd6f69095b7885cb176
-
SHA256
f668430d00b941edd48586a1921cbfa188dcecf50c0e25e753470517dd99c708
-
SHA512
9ead59f4ca9ccfeb0b96244f118c708123307583590d64d3136cfaa9e98364eb90d976d527f8d1d1a8380535d06db5e9af9ecda279ab6da54ad887c27f1fa8cb
-
SSDEEP
6144:cRZ4f5pjA6EstDkoCDuG6K4nY+zIZJz5GyCY6ootoA4t/T4RgU:UkA6ESDkoUuBfqR50YPot3e/Tg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3c0487a7557ec4751d81757b8cba89b
Files
-
d3c0487a7557ec4751d81757b8cba89b.exe windows:4 windows x86 arch:x86
fd52acd72bc93e5b2224585a193a383b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalSize
GetProfileStringA
EnterCriticalSection
LoadResource
GlobalAddAtomA
VirtualAlloc
RaiseException
GetStdHandle
lstrcpyn
SetCommBreak
GetProcessHeap
GlobalLock
ExitThread
GetOEMCP
GlobalFindAtomA
GlobalCompact
LoadLibraryExA
DeleteAtom
GlobalFree
CloseHandle
GetCommState
user32
GetForegroundWindow
GetClassNameA
EndPaint
GetClassInfoExA
AlignRects
GetActiveWindow
GetWindow
BeginPaint
GetWindowTextLengthA
IsIconic
GetDC
ValidateRect
ReleaseDC
CloseWindow
ShowWindow
GetWindowTextA
GetParent
DrawEdge
GetFocus
wsock32
WSACleanup
WSAStartup
WSAGetLastError
WSAAsyncGetServByPort
WSASetBlockingHook
duser
AutoTrace
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ