Static task
static1
Behavioral task
behavioral1
Sample
39e5cd202935ba79981d8396a0588e7225aa139f4d4bfc271a61db9826133a7e.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
39e5cd202935ba79981d8396a0588e7225aa139f4d4bfc271a61db9826133a7e.exe
Resource
win10v2004-20241007-en
General
-
Target
39e5cd202935ba79981d8396a0588e7225aa139f4d4bfc271a61db9826133a7e
-
Size
3.6MB
-
MD5
a3ee881ff7acaf632703b82eafbffa52
-
SHA1
a48bcbf951f670bd6708b6b04b36c674cdb06c48
-
SHA256
39e5cd202935ba79981d8396a0588e7225aa139f4d4bfc271a61db9826133a7e
-
SHA512
78d6c89a7752ddbaf0b6ad1ad3b78071549e39764e5b8ecdd2874a56b448afaa4a012ac4e6e390ad0c04e8455717dc98911978e9d0338b08ae4c33d127e06f87
-
SSDEEP
98304:8uLwXicUGuBtcyi5zgSWhVWy7yywgKpxG0r:v+BgSWD2ywgKpxG0r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 39e5cd202935ba79981d8396a0588e7225aa139f4d4bfc271a61db9826133a7e
Files
-
39e5cd202935ba79981d8396a0588e7225aa139f4d4bfc271a61db9826133a7e.exe windows:5 windows x86 arch:x86
71b7b88e1336804dff9bd99345c9b800
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
PropertySheetW
InitCommonControlsEx
ImageList_Write
ImageList_SetImageCount
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Remove
ImageList_Read
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_EndDrag
ImageList_Draw
ImageList_Destroy
ImageList_Create
ImageList_Copy
ImageList_BeginDrag
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
kernel32
CreateSemaphoreW
CreateThread
DeleteCriticalSection
DeleteFileW
DeviceIoControl
DuplicateHandle
EnumResourceNamesW
EnumSystemLocalesA
ExitProcess
ExitThread
FileTimeToSystemTime
FindCloseChangeNotification
FindFirstChangeNotificationW
FindFirstFileW
FindNextChangeNotification
FindNextFileW
FindResourceExW
FindResourceW
FlushFileBuffers
FlushInstructionCache
FormatMessageA
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetCPInfo
GetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDateFormatW
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetDriveTypeW
GetEnvironmentStringsW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFullPathNameW
GetHandleInformation
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetLocalTime
GetLogicalDrives
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetNumberFormatW
GetOEMCP
GetOverlappedResult
GetPriorityClass
GetPrivateProfileStringW
GetPrivateProfileStructW
GetProcAddress
GetProcessHeap
GetStdHandle
GetStringTypeW
GetSystemDirectoryW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathW
GetThreadContext
GetTimeFormatA
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
CreateProcessW
GetVersionExW
GetVolumeInformationW
GetWindowsDirectoryW
GlobalAlloc
GlobalLock
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LoadLibraryExW
LoadLibraryW
LoadResource
LocalFree
LockResource
lstrcmpA
lstrcmpiW
lstrcmpW
lstrlenA
lstrlenW
MapViewOfFile
MoveFileExW
MulDiv
MultiByteToWideChar
OpenEventA
OpenEventW
OpenMutexW
OpenProcess
OutputDebugStringA
QueryDosDeviceW
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReadProcessMemory
ReleaseSemaphore
RemoveDirectoryW
ResetEvent
ResumeThread
SetConsoleTextAttribute
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFileTime
SetHandleCount
SetLastError
SetNamedPipeHandleState
SetPriorityClass
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TransactNamedPipe
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualQuery
WaitForMultipleObjectsEx
WaitForSingleObjectEx
WaitNamedPipeW
WideCharToMultiByte
WriteConsoleW
WriteFile
WritePrivateProfileStringW
WritePrivateProfileStructW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
GetStartupInfoA
RtlUnwind
CreatePipe
CreateMutexW
CreateFileW
CreateFileMappingW
CreateFileA
CreateEventW
GetStartupInfoW
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
LoadLibraryA
GetFileType
GetStringTypeA
LCMapStringA
GetVersionExA
user32
IsWindowVisible
IsZoomed
KillTimer
LoadAcceleratorsW
LoadBitmapW
GetKeyState
LoadCursorW
LoadIconW
LoadImageW
LoadMenuW
LoadStringW
MapWindowPoints
MessageBoxW
MessageBoxA
IsWindowEnabled
comdlg32
CommDlgExtendedError
advapi32
RegCloseKey
StartServiceW
SetSecurityDescriptorDacl
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
GetUserNameW
InitializeSecurityDescriptor
InitiateSystemShutdownW
LookupPrivilegeValueW
OpenProcessToken
OpenSCManagerW
QueryServiceStatus
OpenServiceW
shell32
ShellExecuteW
ShellExecuteExW
ole32
CreateStreamOnHGlobal
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
shlwapi
PathRemoveExtensionW
PathMatchSpecW
PathIsDirectoryW
PathRemoveFileSpecW
PathFileExistsW
PathCombineW
PathAppendW
PathIsUNCA
PathFindFileNameA
PathAddExtensionW
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ