Static task
static1
Behavioral task
behavioral1
Sample
3ca502466c9e30d3da4df48778da2b78806f5346c662f485229d042d44955a4bN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3ca502466c9e30d3da4df48778da2b78806f5346c662f485229d042d44955a4bN.exe
Resource
win10v2004-20240802-en
General
-
Target
3ca502466c9e30d3da4df48778da2b78806f5346c662f485229d042d44955a4bN
-
Size
395KB
-
MD5
e2e6d207c9634cc2aa8d6cd5a97e07c0
-
SHA1
5da9626039e03a02198b3fc5ba67af26928d2495
-
SHA256
3ca502466c9e30d3da4df48778da2b78806f5346c662f485229d042d44955a4b
-
SHA512
d23a387a5c4a6ad8f6a0965f5d8a337b7d3c5a94bf965f4b3c15f6be5380ff75075f159d7d33ac15d2c44b518853839605cda094225f5c885a8b3dda4da2a8e9
-
SSDEEP
6144:DlRJG8KMBU+xo2e+5bYwCOMeruVipEMS1BWKak/wGY4mswgIxhX8784glfa:DPU+xa8bAe6V1RUKakIGEz8Tsfa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ca502466c9e30d3da4df48778da2b78806f5346c662f485229d042d44955a4bN
Files
-
3ca502466c9e30d3da4df48778da2b78806f5346c662f485229d042d44955a4bN.exe windows:4 windows x86 arch:x86
cce803b1cd8f2125004da912c2b48991
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
LocalFree
GetCurrentDirectoryA
UnmapViewOfFile
CloseHandle
PulseEvent
Sleep
GetComputerNameA
GetSystemTime
FindClose
CreateThread
GetCommandLineW
CreateFileW
lstrcpyA
lstrlenA
GetCurrentProcessId
GetModuleHandleA
GlobalUnlock
HeapCreate
LoadLibraryW
user32
GetDC
FillRect
CheckRadioButton
GetCaretPos
CreateWindowExA
IsWindow
DrawEdge
CreateIcon
DispatchMessageA
GetDlgItem
CallWindowProcA
DrawMenuBar
SetFocus
cryptui
LocalEnroll
CryptUIDlgSelectStoreA
CryptUIDlgCertMgr
CryptUIDlgSelectCA
WizardFree
appwiz.cpl
ConfigStartMenu
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 371KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ