Static task
static1
Behavioral task
behavioral1
Sample
de3bb8ce629fad384dbee2cfc9e6d1c0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
de3bb8ce629fad384dbee2cfc9e6d1c0.exe
Resource
win10v2004-20240226-en
General
-
Target
de3bb8ce629fad384dbee2cfc9e6d1c0
-
Size
21KB
-
MD5
de3bb8ce629fad384dbee2cfc9e6d1c0
-
SHA1
6ef06992a07baa2e097c6afc8208f9bfc22d021f
-
SHA256
0e92def9f49899b43f90482641f79ac4c70fac277f65f48c6891065863d72586
-
SHA512
0329e97ce026d754c005e06c4e49550bb98c73f6b33761c6b130c2ab501d21910ba7f7ad094a943dd451fad5717a6da3d5571504903d29bf18e852926618eccf
-
SSDEEP
384:D0a/Vjnomel+4R0YZchoYEkIsHjkxSBMoR6Phn/lwDM2towfECULMvI:F/VjNelYhREkdzKoe+w2KMI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de3bb8ce629fad384dbee2cfc9e6d1c0
Files
-
de3bb8ce629fad384dbee2cfc9e6d1c0.exe windows:5 windows x86 arch:x86
49419aea5f9c44ef4546a9eb1ff09497
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
cmdial32
AutoDialFunc
adsnt
DllGetClassObject
kernel32
UnhandledExceptionFilter
LoadLibraryExA
MultiByteToWideChar
GetStdHandle
lstrcpyA
TlsSetValue
GetCurrentThreadId
VirtualAlloc
InterlockedDecrement
SetHandleCount
RtlUnwind
WideCharToMultiByte
FreeEnvironmentStringsW
DeleteCriticalSection
GetVersion
LoadResource
SetConsoleCtrlHandler
lstrcpynA
GetOEMCP
GetShortPathNameA
GetEnvironmentStringsW
TlsFree
FindResourceA
lstrlenA
TerminateProcess
lstrlenW
InitializeCriticalSection
VirtualFree
DisableThreadLibraryCalls
GetModuleFileNameA
HeapReAlloc
GetCurrentThread
GetStringTypeA
FatalAppExitA
InterlockedIncrement
GetModuleHandleA
GetProcAddress
SetLastError
LeaveCriticalSection
HeapDestroy
IsDBCSLeadByte
TlsAlloc
HeapCreate
GetCPInfo
HeapAlloc
lstrcatA
lstrcmpiA
ExitProcess
GetEnvironmentStrings
SizeofResource
GetStringTypeW
TlsGetValue
EnterCriticalSection
IsBadReadPtr
FreeLibrary
IsBadWritePtr
LCMapStringW
GetLastError
LoadLibraryA
HeapFree
SetUnhandledExceptionFilter
IsBadCodePtr
WriteFile
GetACP
GetCommandLineA
GetStartupInfoA
LCMapStringA
GetCurrentProcess
GetFileType
FreeEnvironmentStringsA
dataclen
DllGetClassObject
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ