Static task
static1
Behavioral task
behavioral1
Sample
3ec413f2578743cfa82e158cbacbc500N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3ec413f2578743cfa82e158cbacbc500N.exe
Resource
win10v2004-20240709-en
General
-
Target
3ec413f2578743cfa82e158cbacbc500N.exe
-
Size
201KB
-
MD5
3ec413f2578743cfa82e158cbacbc500
-
SHA1
92bb61aae4dbffc2f5d3cea995cfbc0207930834
-
SHA256
73aa8b97854f3d58cb0c1b563e8fc2aa736358a9770e8cfdd7835d3329a36777
-
SHA512
88582482e96a46151a14956432e640bdc5dab9cc37547d95153a011ad93afac1ba0bb13afc48979de0b5071d81213820a0d2a3b170a906131fa016b523894508
-
SSDEEP
3072:r+AUFHYXVdM0Am6UjLUgWmj9z2+EUW+tbdW99MWU1+zKwy6Fo76hDoh9j0Ol:rqSX7Mzm6VgW+2Qdkiszy6FAQD49F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ec413f2578743cfa82e158cbacbc500N.exe
Files
-
3ec413f2578743cfa82e158cbacbc500N.exe.exe windows:1 windows x86 arch:x86
a283f33877b78b471b5fee5937b6f761
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
WriteConsoleA
SetLocalTime
GetCurrentProcess
GetCommandLineA
GetVersion
SetHandleCount
GetProcAddress
LoadLibraryA
PeekConsoleInputA
GetStdHandle
SetErrorMode
Sleep
Beep
GetEnvironmentStrings
GetLastError
SetFilePointer
ExitProcess
WriteFile
CloseHandle
GetFileType
CreateFileA
GetFileAttributesA
DeleteFileA
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
GetNumberOfConsoleInputEvents
GetLocalTime
ReadConsoleA
SetEndOfFile
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
ReadFile
SetConsoleCtrlHandler
SetEnvironmentVariableA
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
GetStartupInfoA
VirtualFree
VirtualAlloc
SetStdHandle
GetCurrentProcessId
GetCurrentDirectoryA
GetFullPathNameA
GetLogicalDrives
SetCurrentDirectoryA
GetStringTypeW
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
RaiseException
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 520B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ