Static task
static1
Behavioral task
behavioral1
Sample
3bdf560f803d282db096e934a810249c88c82fcebf607aa22f2e1ed2e79702b6.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3bdf560f803d282db096e934a810249c88c82fcebf607aa22f2e1ed2e79702b6.exe
Resource
win10v2004-20240611-en
General
-
Target
3bdf560f803d282db096e934a810249c88c82fcebf607aa22f2e1ed2e79702b6.exe
-
Size
80KB
-
MD5
e0423aa6d85431f18668e8a53f8fc690
-
SHA1
addbcd4d106dcbba9d493c4cf580f4395f1138e8
-
SHA256
3bdf560f803d282db096e934a810249c88c82fcebf607aa22f2e1ed2e79702b6
-
SHA512
d82b1557b0141bc54a3e6ccfcdc41b251d6c4e2298c241732ad89a31e7c19f5756af2b76a7115be2455d56d3ac22d654182d5c6da9d7ecbd8ef3739d541d772b
-
SSDEEP
1536:zwz5HFPgSfQhdg4ift/c+XO4QgfRtUm0m9Mg6OR+nQ0O26mQhj1Y7:05Fg+Qufi8QatUmz6Yd0MhpY7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bdf560f803d282db096e934a810249c88c82fcebf607aa22f2e1ed2e79702b6.exe
Files
-
3bdf560f803d282db096e934a810249c88c82fcebf607aa22f2e1ed2e79702b6.exe.exe windows:4 windows x86 arch:x86
3ec9c126380bc1f5153486eb1698f3ba
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
SetFileAttributesA
CloseHandle
SetFileTime
CreateFileA
GetLastError
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetDriveTypeA
GetFullPathNameA
_lclose
OpenFile
SetVolumeLabelA
GetVolumeInformationA
GetCommandLineA
GetVersion
SetConsoleCtrlHandler
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetFileType
GetTimeZoneInformation
GetStartupInfoA
HeapCreate
WriteFile
FlushFileBuffers
SetFilePointer
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetProcAddress
LoadLibraryA
ReadFile
SetStdHandle
SetEndOfFile
DeleteFileA
GetFileAttributesA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
CreateDirectoryA
GetCurrentDirectoryA
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapReAlloc
Sections
.text Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ