Static task
static1
Behavioral task
behavioral1
Sample
3e5358dbaca7ad36fd0e3242528b1f90N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3e5358dbaca7ad36fd0e3242528b1f90N.exe
Resource
win10v2004-20240802-en
General
-
Target
3e5358dbaca7ad36fd0e3242528b1f90N.exe
-
Size
6.0MB
-
MD5
3e5358dbaca7ad36fd0e3242528b1f90
-
SHA1
502e01d62d6b4fa62102eeab310e23f1a93fe5ce
-
SHA256
3d0ec928e2856586475c272ac026c378cf5649d99db7f9fdc9a441be9a986647
-
SHA512
13e731e7c4d8bc91fca854b20b6934e395518d987763f4938f5c8c609848d41bf29a0d0be2efa4fe8fe8659d203f61a94d15e9b3664bb4ba42ce5968b939db83
-
SSDEEP
196608:wVw87pSe65uYu4iuZqJDoW9hP5VEOw2z1YQ:Ww87A35ZMDoGEra1YQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e5358dbaca7ad36fd0e3242528b1f90N.exe
Files
-
3e5358dbaca7ad36fd0e3242528b1f90N.exe.exe windows:6 windows x86 arch:x86
433cc0911ddd16e58ae9b5334146c1f5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDebuggerPresent
GetModuleHandleW
TlsFree
TlsSetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
QueryPerformanceCounter
WriteFile
LoadLibraryExW
GetACP
GetOEMCP
GetCPInfo
LCMapStringW
OutputDebugStringW
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
GetCommandLineW
GetSystemTime
LocalAlloc
LocalFree
GetThreadTimes
GetCurrentProcessId
CloseHandle
GetVersionExA
GetCurrentDirectoryA
IsValidCodePage
FlushFileBuffers
LeaveCriticalSection
GetSystemTimeAdjustment
WideCharToMultiByte
GetProcessTimes
ClearCommBreak
GetModuleHandleExW
GetCommState
UnmapViewOfFile
GetLocaleInfoA
TlsGetValue
GlobalMemoryStatus
CreateFileA
GetDateFormatW
Sleep
GetModuleFileNameW
GetStartupInfoW
EncodePointer
DecodePointer
GetLastError
HeapReAlloc
RaiseException
RtlUnwind
IsProcessorFeaturePresent
ExitProcess
GetProcAddress
MultiByteToWideChar
HeapSize
HeapFree
HeapAlloc
GetProcessHeap
SetLastError
GetCurrentThreadId
GetStdHandle
GetFileType
DeleteCriticalSection
CreateFileW
user32
EndPaint
SetWindowRgn
IsIconic
GetParent
LoadIconA
RemovePropA
CreateMenu
GetWindowTextLengthA
DrawEdge
ShowCaret
BeginPaint
GetDoubleClickTime
GetKeyboardState
AppendMenuW
UnregisterClassA
EnableMenuItem
SetClassLongA
DrawStateW
GetSysColor
CheckDlgButton
CreatePopupMenu
DrawMenuBar
SetCaretPos
InsertMenuA
SetWindowTextA
AdjustWindowRect
FindWindowA
ToUnicode
SetDlgItemTextA
GetMessageTime
IsRectEmpty
DestroyWindow
SetWindowPlacement
SetTimer
DrawFocusRect
EndDialog
EnableScrollBar
FlashWindow
DestroyMenu
SetWindowPos
gdi32
PolyPolygon
GetWindowOrgEx
Pie
ExtFloodFill
Polygon
GetDeviceCaps
SetBkColor
SetDIBColorTable
ExcludeClipRect
CreatePalette
CreateBitmap
GetPaletteEntries
EnumFontFamiliesExA
CreatePenIndirect
CreateRectRgnIndirect
SetMapMode
CreateCompatibleBitmap
GetCharWidthA
ExtCreateRegion
GetTextExtentPointW
GetBkColor
SelectPalette
SetPaletteEntries
GetDIBColorTable
GetTextExtentExPointA
GetCharWidth32A
GetTextExtentPointA
SetTextAlign
EqualRgn
Rectangle
EnumFontFamiliesA
GetCharABCWidthsFloatA
Polyline
GetClipBox
GetPixel
GetObjectA
GetStockObject
RestoreDC
CreateCompatibleDC
advapi32
RegCreateKeyExA
SetSecurityDescriptorDacl
RegDeleteKeyA
EqualSid
RegEnumKeyA
InitializeSecurityDescriptor
shell32
CommandLineToArgvW
Sections
.text Size: 368KB - Virtual size: 367KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5.7MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ