Static task
static1
Behavioral task
behavioral1
Sample
3bc8747b271f8b7f4ff3ec6732dacdc0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3bc8747b271f8b7f4ff3ec6732dacdc0N.exe
Resource
win10v2004-20240802-en
General
-
Target
3bc8747b271f8b7f4ff3ec6732dacdc0N.exe
-
Size
304KB
-
MD5
3bc8747b271f8b7f4ff3ec6732dacdc0
-
SHA1
d8279afa3eeda27f4a49ee7eb935676adaf04e50
-
SHA256
30d4dc15ea4961d69473413e2e95fc33b558f04998f8c047b6ff76dfaff02a99
-
SHA512
a21971b9f2d502845eff21620f21750fa3e86d63aa3ef4a18dcb553f2dd86cfbca66ac315f6b024d86d9bd41e29f5fcab1843563d93399651b49bd1536558ea4
-
SSDEEP
6144:gMjDcP+wbqVIl5ueKfTlzhwgnXDtTytrICSksK4rhNxOgxw:VjiJb0ucDfTIk5yGcP8bxw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3bc8747b271f8b7f4ff3ec6732dacdc0N.exe
Files
-
3bc8747b271f8b7f4ff3ec6732dacdc0N.exe.exe windows:4 windows x86 arch:x86
1dd7503389cd11b1b082a3dc3c574df7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStartupInfoA
IsBadStringPtrW
GetLastError
IsValidLocale
CreateMutexA
lstrcpyW
lstrcpyA
GetCurrentDirectoryW
GetFileTime
SetFileAttributesA
WriteConsoleW
HeapCreate
FindResourceA
CloseHandle
WriteConsoleW
GetModuleHandleA
ReadFile
FormatMessageA
GetFileSize
WriteConsoleW
ReleaseMutex
msi
MsiAdvertiseProductA
MsiCloseAllHandles
MsiCloseHandle
MsiCreateRecord
user32
IsCharLowerA
IsDialogMessageA
SetFocus
DispatchMessageA
wsprintfW
GetWindowLongW
IsWindow
LoadCursorW
GetWindowTextA
IsZoomed
PostMessageW
PeekMessageW
SetCursorPos
wldap32
ldap_add
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text1 Size: 1024B - Virtual size: 263B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE