Static task
static1
Behavioral task
behavioral1
Sample
3c4ced5b92b74b82be981a42c88b29509c5a27e59c843b8335b70f6b52df9c7bN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3c4ced5b92b74b82be981a42c88b29509c5a27e59c843b8335b70f6b52df9c7bN.exe
Resource
win10v2004-20241007-en
General
-
Target
3c4ced5b92b74b82be981a42c88b29509c5a27e59c843b8335b70f6b52df9c7bN
-
Size
1.4MB
-
MD5
3172587859ab5700447ce3fb12918cc0
-
SHA1
0e04e41125c9c9ff1e28d55461c44270a63c4f96
-
SHA256
3c4ced5b92b74b82be981a42c88b29509c5a27e59c843b8335b70f6b52df9c7b
-
SHA512
d18ef1998ebb888a815a1246aab66bcc5c6e859bdfbc2ab4c0e4b2cb346a06f35e741acd3cb3c67a3fb493d9ad74c4125eab462a615472eddab745b683ee60d1
-
SSDEEP
24576:DtJc3q5o5i4g5mA/NoNr2mX2LofIY6fnzym14cBoYd77veB2G8Qu6ak4UnKwG:JNG5E5mA/NoF2mX2sfux1NBz8u99UhG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c4ced5b92b74b82be981a42c88b29509c5a27e59c843b8335b70f6b52df9c7bN
Files
-
3c4ced5b92b74b82be981a42c88b29509c5a27e59c843b8335b70f6b52df9c7bN.exe windows:4 windows x86 arch:x86
088d4b44cd6269997a4595fcdaa9b5dc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42u
ord4692
ord5303
ord5285
ord5710
ord2977
ord3142
ord3254
ord4459
ord3131
ord3257
ord2980
ord3076
ord2971
ord3825
ord3826
ord4074
ord3074
ord4075
ord4616
ord4418
ord3733
ord561
ord815
ord4155
ord5769
ord2910
ord1197
ord4124
ord4273
ord1569
ord2717
ord1165
ord5298
ord5296
ord3341
ord2388
ord5193
ord1089
ord3917
ord5727
ord2504
ord2546
ord4480
ord6371
ord354
ord5180
ord3313
ord823
ord5438
ord1971
ord825
ord665
ord861
ord858
ord2810
ord4269
ord537
ord800
ord540
ord3820
ord4609
msvcrt
_controlfp
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
swprintf
wcscpy
wcscmp
__CxxFrameHandler
memset
_memicmp
memcpy
_msize
realloc
free
malloc
kernel32
HeapAlloc
IsBadReadPtr
HeapFree
FreeLibrary
GetTickCount
GetModuleFileNameW
GetProcessHeap
CreateDirectoryW
GetTempPathW
CloseHandle
UnmapViewOfFile
CreateProcessW
GetWindowsDirectoryW
ReadFile
CreateFileW
GetModuleHandleW
GetStartupInfoW
VirtualAlloc
VirtualProtect
VirtualFree
DeleteFileW
LoadLibraryA
GetProcAddress
user32
IsWindow
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ