Static task
static1
Behavioral task
behavioral1
Sample
3b5249c5f03f2b8547414f5eeb576e1b79af8c3a439becd5fcb22718ff4a0645.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3b5249c5f03f2b8547414f5eeb576e1b79af8c3a439becd5fcb22718ff4a0645.exe
Resource
win10v2004-20240426-en
General
-
Target
3b5249c5f03f2b8547414f5eeb576e1b79af8c3a439becd5fcb22718ff4a0645
-
Size
685KB
-
MD5
63e09bb4079beb1cc89fb76465fbd3a1
-
SHA1
f15b139f1797ba30dc0f17c505e3a4c3abfaf564
-
SHA256
3b5249c5f03f2b8547414f5eeb576e1b79af8c3a439becd5fcb22718ff4a0645
-
SHA512
108ed2794f54e05b2d2024c2042b5705e62b4315cd67d0166eccd4748b6094f303f9c5b008456d27749605f05b95a2104b2f66034f808bec8300cc2bfa63e4b3
-
SSDEEP
3072:ZRi0lcmXLkjBe5ZcC1fIOO8F52AEItRjdtoFHSDH5A4iXWpmA5P/pyfV:Z4CcmXL3V1fIOOuttrzLm4iGA0P/C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b5249c5f03f2b8547414f5eeb576e1b79af8c3a439becd5fcb22718ff4a0645
Files
-
3b5249c5f03f2b8547414f5eeb576e1b79af8c3a439becd5fcb22718ff4a0645.exe windows:5 windows x86 arch:x86
2b4194e8fc9ada8d6369dd5d8afe08d5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
GetStringTypeA
LCMapStringA
HeapReAlloc
VirtualAlloc
EnterCriticalSection
GetLocaleInfoA
HeapSize
RtlUnwind
LoadLibraryA
InitializeCriticalSectionAndSpinCount
IsDBCSLeadByte
SetLastError
CreateMutexW
GetLastError
CloseHandle
GetCurrentThread
SetThreadPriority
MultiByteToWideChar
OutputDebugStringW
GetCommandLineA
GetStartupInfoA
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
HeapAlloc
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetModuleHandleA
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
user32
UpdateWindow
RegisterClassW
SetWindowRgn
GetClientRect
FillRect
LoadBitmapW
GetSystemMetrics
LoadIconW
LoadCursorW
RegisterClassExW
CreateWindowExW
GetMessageW
TranslateMessage
DispatchMessageW
PostQuitMessage
SetWindowLongW
SetWindowPos
DefWindowProcW
GetDC
ReleaseDC
KillTimer
DestroyWindow
SetTimer
IsWindow
gdi32
SetBkMode
GetTextAlign
SetTextAlign
BeginPath
Polygon
EndPath
PathToRegion
CreatePolyPolygonRgn
CreateDCW
CreateCompatibleBitmap
StretchBlt
CreatePolygonRgn
GetTextExtentPoint32W
TextOutW
CreateSolidBrush
CreateCompatibleDC
SelectObject
BitBlt
DeleteObject
DeleteDC
GetStockObject
GetDeviceCaps
CreateFontW
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 588KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ