Static task
static1
Behavioral task
behavioral1
Sample
39d3969b93ad064031dc33dc65a354c0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
39d3969b93ad064031dc33dc65a354c0N.exe
Resource
win10v2004-20240709-en
General
-
Target
39d3969b93ad064031dc33dc65a354c0N.exe
-
Size
529KB
-
MD5
39d3969b93ad064031dc33dc65a354c0
-
SHA1
8ff27f005b702ac70614ad1c950e1e7f0071dade
-
SHA256
dab55b6d51d8d2776a8a76ef28a1515f51b209875fb793a7f98323c887d72e1a
-
SHA512
ae63669af9ee0f2e3b740988e0beb057ed3f8ff075c6ca62cf1b3c3259cb0794ec70132ab09de03fca65043611a170398bf9b8cede1fe044b334d088dcfb4d2b
-
SSDEEP
12288:9rDUoeXPhckglkzECcjnX8NXXfRtQEg5De:9fR6KkTziX8FzQ+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39d3969b93ad064031dc33dc65a354c0N.exe
Files
-
39d3969b93ad064031dc33dc65a354c0N.exe.exe windows:4 windows x86 arch:x86
84379b4813b3b4eee9eef07e85945eb3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
GetUrlCacheHeaderData
ResumeSuspendedDownload
InternetSetDialStateA
shell32
ExtractAssociatedIconExW
ShellExecuteA
RealShellExecuteExW
ExtractAssociatedIconExA
comdlg32
ReplaceTextW
PrintDlgW
comctl32
ImageList_DragShowNolock
InitCommonControlsEx
ImageList_LoadImageW
ImageList_Merge
ImageList_Create
DrawStatusTextW
ImageList_GetIconSize
user32
CreateWindowExA
DefWindowProcW
CharNextExA
GetParent
EndDialog
GetLastActivePopup
RegisterDeviceNotificationW
TranslateAcceleratorA
CharLowerA
GetWindowInfo
GetClipboardData
TranslateAccelerator
EnumClipboardFormats
RegisterClassExA
PackDDElParam
DdePostAdvise
CharToOemA
TrackPopupMenuEx
DrawStateA
LoadStringW
DestroyWindow
MapDialogRect
MessageBoxA
RegisterClassA
CloseDesktop
ShowWindow
gdi32
GetLayout
kernel32
GetModuleHandleA
GetTickCount
LeaveCriticalSection
GetCurrentProcess
GetCPInfo
TlsSetValue
UnhandledExceptionFilter
RtlUnwind
HeapDestroy
ExitProcess
EnterCriticalSection
GetConsoleMode
GetCommandLineA
TlsAlloc
GetStdHandle
GetUserDefaultLCID
GetEnvironmentStrings
GetCurrentThreadId
CreateMutexA
GetCurrentProcessId
EnumSystemLocalesA
CreateFileA
LCMapStringW
InitializeCriticalSection
CopyFileExA
VirtualQuery
FreeEnvironmentStringsA
GetLocaleInfoW
GetProcessHeap
LCMapStringA
HeapSize
WideCharToMultiByte
CompareStringW
WriteConsoleW
GetModuleFileNameA
GetStartupInfoW
GetLocaleInfoA
GetACP
TlsFree
SetLastError
GetSystemTimeAsFileTime
SetEnvironmentVariableA
InterlockedIncrement
WriteConsoleA
GetFileType
CloseHandle
VirtualFree
FreeEnvironmentStringsW
SetHandleCount
GetStringTypeW
DeleteCriticalSection
HeapAlloc
GetStartupInfoA
InterlockedExchange
GetProcAddress
GetConsoleOutputCP
IsDebuggerPresent
IsValidCodePage
FreeLibrary
CompareStringA
GetLastError
ReadFile
GetCurrentThread
VirtualAlloc
InterlockedDecrement
TerminateProcess
GetDateFormatA
GetStringTypeA
GetCommandLineW
SetFilePointer
GetTimeZoneInformation
Sleep
WriteFile
GetOEMCP
IsValidLocale
HeapFree
TlsGetValue
SetUnhandledExceptionFilter
HeapReAlloc
SetStdHandle
GetVersionExA
GetModuleFileNameW
GetConsoleCP
LoadLibraryA
GetTimeFormatA
GetEnvironmentStringsW
OpenMutexA
SetConsoleCtrlHandler
FlushFileBuffers
HeapCreate
QueryPerformanceCounter
MultiByteToWideChar
Sections
.text Size: 194KB - Virtual size: 194KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 211KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ