Static task
static1
Behavioral task
behavioral1
Sample
3dec7f27b4fca44c478e7e263c81744d299c936f02a86490c6d3d4033730f37c.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3dec7f27b4fca44c478e7e263c81744d299c936f02a86490c6d3d4033730f37c.dll
Resource
win10v2004-20240704-en
General
-
Target
3dec7f27b4fca44c478e7e263c81744d299c936f02a86490c6d3d4033730f37c.exe
-
Size
6.5MB
-
MD5
3f145c9fb1a1b8d3aaf0baea08407ef0
-
SHA1
7e0259daf179c0beac9cc701caf2db1784a25700
-
SHA256
3dec7f27b4fca44c478e7e263c81744d299c936f02a86490c6d3d4033730f37c
-
SHA512
a8cd4a368af23068588b37792bc887d7dc0402c9f756497f28e9e7a7f2c59ae3fb19a0505778fe8ec952270567a210e3f5dd8c3b30b2104f94459b05359fd6a4
-
SSDEEP
196608:NX/3ca4rWrz50+ssiChRoGlai01qL1Gt32mE:h/14rWrz50+s4hR1ly1G22L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dec7f27b4fca44c478e7e263c81744d299c936f02a86490c6d3d4033730f37c.exe
Files
-
3dec7f27b4fca44c478e7e263c81744d299c936f02a86490c6d3d4033730f37c.exe.dll windows:6 windows x86 arch:x86
2ab86c05e3c1db0e85e82dcbdbcf0ceb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
ExpandEnvironmentStringsW
GetFullPathNameW
GetCommandLineW
CreateFileA
GetFileSize
GetDriveTypeW
VirtualQuery
SetDllDirectoryW
SetHandleInformation
GlobalLock
GetUserDefaultLCID
ClearCommBreak
GetUserDefaultLangID
GetConsoleCP
FormatMessageW
FileTimeToSystemTime
GetSystemDirectoryA
ExitThread
GetStartupInfoW
VerifyVersionInfoW
SetThreadLocale
IsDBCSLeadByteEx
GetThreadLocale
CreateNamedPipeA
GlobalFree
TlsFree
LockResource
GetCurrentProcessId
CreateThread
SetEnvironmentVariableA
ReadConsoleW
WriteConsoleW
SetStdHandle
GetFileAttributesExW
CreateProcessA
WaitForSingleObject
OutputDebugStringW
SetFilePointerEx
ReadFile
GetConsoleMode
CloseHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleFileNameA
GetFileType
LoadLibraryExW
GetModuleFileNameW
WriteFile
GetSystemTime
LocalFree
GetUserDefaultUILanguage
GetOEMCP
EnumResourceTypesW
CreateEventW
CreateFileMappingA
VirtualAlloc
GetPrivateProfileIntW
FlushFileBuffers
GetOverlappedResult
IsProcessorFeaturePresent
GetTimeZoneInformation
GetExitCodeProcess
GetSystemTimeAdjustment
GetDateFormatW
ExpandEnvironmentStringsA
WaitForSingleObjectEx
SetEnvironmentVariableW
WaitNamedPipeA
FreeLibrary
SetEndOfFile
FindFirstFileW
ResetEvent
GetStdHandle
GetACP
IsValidCodePage
IsDebuggerPresent
GetProcessHeap
HeapSize
EnumSystemLocalesW
IsValidLocale
GetLocaleInfoW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
GetStringTypeW
GetLastError
HeapReAlloc
GetSystemTimeAsFileTime
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
HeapFree
HeapAlloc
RaiseException
RtlUnwind
GetCommandLineA
GetCurrentThreadId
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
GetModuleHandleW
CompareStringW
LCMapStringW
CreateFileW
user32
ValidateRgn
CharUpperBuffW
ModifyMenuW
InflateRect
GetWindowTextW
GetMonitorInfoW
EnableScrollBar
DestroyCursor
MapWindowPoints
GetDlgCtrlID
GetWindow
ClientToScreen
RegisterWindowMessageW
GetDC
GetClassNameW
SetWindowLongW
SendDlgItemMessageW
GetDesktopWindow
gdi32
GetTextExtentPoint32W
Ellipse
OffsetRgn
SetPolyFillMode
SetWinMetaFileBits
CloseEnhMetaFile
SetViewportOrgEx
GetRegionData
CombineRgn
RectInRegion
StretchDIBits
SetWindowOrgEx
comdlg32
GetSaveFileNameW
FindTextW
advapi32
RegUnLoadKeyW
ControlService
QueryServiceStatus
StartServiceW
RegLoadKeyW
LookupPrivilegeValueW
SetSecurityDescriptorDacl
shell32
CommandLineToArgvW
ole32
CoTaskMemFree
oleaut32
VariantInit
VariantClear
SafeArrayCreate
VariantCopy
SysReAllocStringLen
Sections
.text Size: 576KB - Virtual size: 575KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5.9MB - Virtual size: 6.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ