clarisin_init
Static task
static1
Behavioral task
behavioral1
Sample
3388f2ab3f3d19649840bc4a4a652720N.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3388f2ab3f3d19649840bc4a4a652720N.dll
Resource
win10v2004-20240709-en
General
-
Target
3388f2ab3f3d19649840bc4a4a652720N.exe
-
Size
132KB
-
MD5
3388f2ab3f3d19649840bc4a4a652720
-
SHA1
26b118081bb3aa3c8c064c3b5e57a4a191a55ecb
-
SHA256
baa02f9b04996ad52adc3e56871ba5337b08cef0808081b6dc9ac27063459d56
-
SHA512
b24250ac3dae095a1dbf1470472d44b9621c836954cdf910aa7d4c0b9e8abe4ea9e7555992947f3fc88867c63dbca9e80555ff26b6e189805f9d4526cbb90970
-
SSDEEP
1536:BKqXvlYMuXczvOPHInqcbvMjHMr8kvY2ORiQOLSeTtCWRyyEms/R8g8TScY1o9O1:nSuvZHNZEAScY1oUN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3388f2ab3f3d19649840bc4a4a652720N.exe
Files
-
3388f2ab3f3d19649840bc4a4a652720N.exe.dll windows:4 windows x86 arch:x86
d4232a45900f12ce41fc35c616f430cb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
graphite.exe
ord435
ord63
ord73
ord268
ord950
ord72
ord232
ord278
ord332
ord106
ord288
ord726
ord351
ord773
ord562
ord373
ord416
ord686
ord772
ord369
ord211
ord506
kernel32
HeapFree
HeapAlloc
RtlUnwind
HeapReAlloc
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
GetLastError
ReadFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
SetFilePointer
GetProcAddress
GetModuleHandleA
CloseHandle
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
InitializeCriticalSection
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
RaiseException
TerminateProcess
GetCurrentProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
SetStdHandle
InterlockedDecrement
InterlockedIncrement
FlushFileBuffers
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetEndOfFile
Exports
Exports
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ