Static task
static1
Behavioral task
behavioral1
Sample
3feae96c5b1051327bac86296a36dadc22a1c2eac517e881cdc7ea862c213c8e.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
3feae96c5b1051327bac86296a36dadc22a1c2eac517e881cdc7ea862c213c8e.exe
Resource
win10v2004-20240226-en
General
-
Target
3feae96c5b1051327bac86296a36dadc22a1c2eac517e881cdc7ea862c213c8e
-
Size
37KB
-
MD5
20e5bf7765e3fe4af620ee3d9dd9a5c3
-
SHA1
04bebd3db865391f8237f8a35086dc67ac3d38a8
-
SHA256
3feae96c5b1051327bac86296a36dadc22a1c2eac517e881cdc7ea862c213c8e
-
SHA512
cae481f9a19df7bd360a46182993715da56f04710d0bebbea5b9daeccf608608c4d0803f77577da27a94f7942461c4e4f95cb53e3005c18e15aa89ee54f9416a
-
SSDEEP
768:A/E+UlejKbjWwKtUZS6KUAghE3c1ng8o6d9K:AC2tUZdHAMEyngBgK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3feae96c5b1051327bac86296a36dadc22a1c2eac517e881cdc7ea862c213c8e
Files
-
3feae96c5b1051327bac86296a36dadc22a1c2eac517e881cdc7ea862c213c8e.exe windows:4 windows x86 arch:x86
13169adaa55a4b4676c2eeddc904744e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__commode
_controlfp
_except_handler3
__set_app_type
_XcptFilter
__p__fmode
_exit
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
user32
PostQuitMessage
DialogBoxParamA
DestroyWindow
DefWindowProcA
CreateWindowExA
ShowWindow
UpdateWindow
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateMessage
DispatchMessageA
SendMessageA
kernel32
lstrcpynA
GetFileType
CloseHandle
FindNextFileA
GetFileSize
DeleteFileA
FindFirstFileA
GetModuleHandleA
CreateFileA
GetStartupInfoA
GetLogicalDriveStringsA
GetEnvironmentStringsA
FindClose
GetModuleFileNameA
gdi32
CreateFontIndirectA
comctl32
ord17
shfolder
SHGetFolderPathA
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ