Static task
static1
Behavioral task
behavioral1
Sample
3e1d5acc64d61382923ea9145609a474f68241a8ed1979cba88c436a8e2b7894.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
3e1d5acc64d61382923ea9145609a474f68241a8ed1979cba88c436a8e2b7894.exe
Resource
win10v2004-20240611-en
General
-
Target
3e1d5acc64d61382923ea9145609a474f68241a8ed1979cba88c436a8e2b7894
-
Size
1.0MB
-
MD5
0b5282893f61eeb07e86bb74eb9a00b1
-
SHA1
773e152a7e311d6b552b41cc3fbddf3c21b75402
-
SHA256
3e1d5acc64d61382923ea9145609a474f68241a8ed1979cba88c436a8e2b7894
-
SHA512
19801e6a3492750fcaf98512258cd90c39ad45ec33e8efb09edee0621231921185ebdad6120ff06191a0c5c9100b862b0b2d7ab285ee1b49df32ffdc1bd1464b
-
SSDEEP
12288:ItRsn4sIs/+EtjPe47Z7D72LjgusHoaFnN7s0P0hK0l:ItRsnXbta3jguMj71PT0l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e1d5acc64d61382923ea9145609a474f68241a8ed1979cba88c436a8e2b7894
Files
-
3e1d5acc64d61382923ea9145609a474f68241a8ed1979cba88c436a8e2b7894.exe windows:1 windows x86 arch:x86
94f4994bc0524f9035384cf5d6279976
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_llseek
_lclose
_lopen
WinExec
_lread
GetModuleFileNameA
GetLastError
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetEnvironmentStrings
lstrcpyA
GetSystemDirectoryA
ExitProcess
lstrcatA
UnhandledExceptionFilter
GetACP
GetOEMCP
GetCPInfo
GetStdHandle
GetFileType
VirtualFree
VirtualAlloc
GetCurrentDirectoryA
GetCommandLineA
GetVersion
RtlUnwind
user32
wsprintfA
MessageBoxA
LoadStringA
advapi32
RegQueryValueA
RegOpenKeyA
RegCloseKey
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 806B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ