Static task
static1
Behavioral task
behavioral1
Sample
3d001fa1a23dbd9313616a6a4faac480N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3d001fa1a23dbd9313616a6a4faac480N.exe
Resource
win10v2004-20240802-en
General
-
Target
3d001fa1a23dbd9313616a6a4faac480N
-
Size
145KB
-
MD5
3d001fa1a23dbd9313616a6a4faac480
-
SHA1
b77150b2fa86f5d714360e8663b086849e2e7a96
-
SHA256
c392055b8405683b96f93be5ad995d53095a1b660fd9a3c164e2f4a3c4797cc8
-
SHA512
475df27140bb4ef1f71b4e19e01f68cc1a820d2c19e62ed2f860b98b0be2dd87cdab8552372f5975245f62fbf994865e5dbdf19805e10e7d71e31d99e44fa8ea
-
SSDEEP
3072:Uv49p2ncDyhXW/rULx6rezVL21Qg4kyOXhVOaHWQf1LE+:J9pKcDKLxt6aghhVOCWQf1E+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d001fa1a23dbd9313616a6a4faac480N
Files
-
3d001fa1a23dbd9313616a6a4faac480N.exe windows:5 windows x86 arch:x86
b8b82d463f3ca158c2acf23bfdff414f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
RegCloseKey
comctl32
ord17
comdlg32
GetOpenFileNameW
gdi32
DeleteDC
ole32
OleInitialize
oleaut32
VariantInit
shell32
SHGetMalloc
shlwapi
SHAutoComplete
user32
GetDC
Sections
.MPRESS1 Size: 81KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE