Static task
static1
Behavioral task
behavioral1
Sample
3a88f0fc73acf38db7f7e4218d40c6b251c245d6b71a7f09d50d216467cc6d25.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
3a88f0fc73acf38db7f7e4218d40c6b251c245d6b71a7f09d50d216467cc6d25.exe
Resource
win10v2004-20240426-en
General
-
Target
3a88f0fc73acf38db7f7e4218d40c6b251c245d6b71a7f09d50d216467cc6d25
-
Size
1.4MB
-
MD5
9ebaa4c5dddcafeee6f0afb0d50d315c
-
SHA1
058a07e1a5d532992858afa34616b7ab1cb6d0b9
-
SHA256
3a88f0fc73acf38db7f7e4218d40c6b251c245d6b71a7f09d50d216467cc6d25
-
SHA512
488981abf2a651cca854b63cfa226a7d699fab2cc9cd2e6a395dcc1c56ded1c8e33384f82f4c400b5f07898d58beca4dd321a801dcf9a15ae58493bbb16268d5
-
SSDEEP
24576:Iq9Sp0Udt5YGPJA7qJI7C/IvVLS6Ug4S4PzXrPje+SYU6vv5dzraxLnlrmyBAM0a:GtHJl56L4S4PzXrLNUuv58xzw6ALN6z3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a88f0fc73acf38db7f7e4218d40c6b251c245d6b71a7f09d50d216467cc6d25
Files
-
3a88f0fc73acf38db7f7e4218d40c6b251c245d6b71a7f09d50d216467cc6d25.exe windows:4 windows x86 arch:x86
739f6ad6619071f7d15edf0a5866591a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStrings
user32
LoadIconA
gdi32
GetTextMetricsA
winmm
midiStreamStop
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
ord17
ws2_32
inet_ntoa
comdlg32
GetSaveFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 372KB - Virtual size: 760KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1000KB - Virtual size: 1000KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ