Static task
static1
Behavioral task
behavioral1
Sample
3ed5086da17245b75f2ef5e57be848e3d54244a0d99e679a620f25b35cb587d8.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
3ed5086da17245b75f2ef5e57be848e3d54244a0d99e679a620f25b35cb587d8.exe
Resource
win10v2004-20240611-en
General
-
Target
3ed5086da17245b75f2ef5e57be848e3d54244a0d99e679a620f25b35cb587d8
-
Size
116KB
-
MD5
a953ce72c35d29ca0bb6b5bd1259a786
-
SHA1
2833331a861309eb7515af3b5e73612e92fb4c77
-
SHA256
3ed5086da17245b75f2ef5e57be848e3d54244a0d99e679a620f25b35cb587d8
-
SHA512
8ee4c82d2bf7fe4c030d231d3084aea8fbd12b85dbccfe6f31322e0088c4f2f8636491e53d02729ce53d1a7f46f83114b53b246993b13ac329df1061996f9e3b
-
SSDEEP
1536:nP2bLDuFB9kaxVBkJubgJqWU7kMQFrZ7ebYmfTrtA62N0Iz5Kx:+/DwkPubr7k9DoTrtA62N0osx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ed5086da17245b75f2ef5e57be848e3d54244a0d99e679a620f25b35cb587d8
Files
-
3ed5086da17245b75f2ef5e57be848e3d54244a0d99e679a620f25b35cb587d8.exe windows:4 windows x86 arch:x86
d677aa9b9a18396f7c0577d5f7dbf99d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
RemoveDirectoryW
FindClose
FindNextFileW
FindFirstFileW
GetFileAttributesExW
ReadFile
GetFileSize
CreateFileW
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
GetLastError
lstrcmpiW
SetLastError
FreeLibrary
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
FlushFileBuffers
CreateFileA
lstrlenA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
WideCharToMultiByte
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
MultiByteToWideChar
lstrlenW
InterlockedDecrement
RaiseException
CreateProcessW
WaitForSingleObject
CloseHandle
DeleteFileW
GetFileAttributesW
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
FreeEnvironmentStringsA
Sleep
GetModuleFileNameA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetFileAttributesW
GetVersionExA
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
GetProcAddress
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
HeapReAlloc
GetStartupInfoW
HeapDestroy
HeapCreate
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapSize
GetCPInfo
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
RtlUnwind
ExitProcess
WriteFile
GetStdHandle
GetEnvironmentStrings
user32
SetWindowTextW
SetTimer
EndDialog
GetWindowLongW
SendMessageW
DefWindowProcW
MessageBoxW
GetActiveWindow
DialogBoxParamW
DestroyWindow
SetWindowLongW
PostQuitMessage
GetSystemMetrics
LoadImageW
GetWindowTextW
CharNextW
LoadStringW
GetParent
GetWindow
GetWindowRect
SystemParametersInfoW
GetClientRect
MapWindowPoints
SetWindowPos
GetDlgItem
KillTimer
UnregisterClassA
advapi32
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
shell32
SHGetFolderPathW
ole32
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
oleaut32
VarUI4FromStr
shlwapi
PathRemoveFileSpecW
comctl32
InitCommonControlsEx
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ