Static task
static1
Behavioral task
behavioral1
Sample
a3f3cdbe8bfa62fc45d5fbd7e3abbca534d7b746cebec10c869f6b328766a1e6.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a3f3cdbe8bfa62fc45d5fbd7e3abbca534d7b746cebec10c869f6b328766a1e6.exe
Resource
win10v2004-20241007-en
General
-
Target
a3f3cdbe8bfa62fc45d5fbd7e3abbca534d7b746cebec10c869f6b328766a1e6.exe
-
Size
365KB
-
MD5
9c27f6c504605d7360b8377b2112de4e
-
SHA1
c3e3c536032644ccd9adf76f3da506a6f1dd17bc
-
SHA256
a3f3cdbe8bfa62fc45d5fbd7e3abbca534d7b746cebec10c869f6b328766a1e6
-
SHA512
05e5d0b221a4ae0311adeead8e3f24b63d2c04a9de3c066f12af05849d30be80de3f00718e15e0ca2d5d3a16874d6e907841de1c4697c2aed6f88fd05697d00f
-
SSDEEP
6144:+BLkzpkuTSpdpzkPWadYdhNvJbzlWNjAh3W0JH:aMpZejpz9a+FXhJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3f3cdbe8bfa62fc45d5fbd7e3abbca534d7b746cebec10c869f6b328766a1e6.exe
Files
-
a3f3cdbe8bfa62fc45d5fbd7e3abbca534d7b746cebec10c869f6b328766a1e6.exe.exe windows:5 windows x86 arch:x86
8e6ac5a04c6d48e1f76509e2cb5b37f1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessW
ClearCommError
InterlockedDecrement
GetCurrentProcess
SetEnvironmentVariableW
CreateJobObjectW
SetComputerNameW
GetComputerNameW
GetTimeFormatA
GetCurrencyFormatA
GetConsoleAliasExesW
EnumTimeFormatsW
TlsSetValue
GetEnvironmentStrings
GlobalAlloc
SetFileShortNameW
GetLocaleInfoW
ReadConsoleInputA
GetCalendarInfoW
SetVolumeMountPointA
GetFileAttributesA
CreateSemaphoreA
GetModuleFileNameW
CreateActCtxA
GetShortPathNameA
CommConfigDialogA
InterlockedExchange
GetLogicalDriveStringsA
GetLastError
GetCurrentDirectoryW
SetLastError
GetProcAddress
DefineDosDeviceW
CreateNamedPipeA
FindClose
LoadLibraryA
InterlockedExchangeAdd
CreateHardLinkW
GetNumberFormatW
GetCommMask
EnumDateFormatsA
GlobalUnWire
OpenEventW
GetShortPathNameW
GetDiskFreeSpaceExA
GetVersionExA
ReadConsoleInputW
GetTempPathA
LocalFree
SetFileAttributesW
LCMapStringW
VerifyVersionInfoW
GlobalCompact
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapAlloc
GetStartupInfoW
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
TlsGetValue
TlsAlloc
TlsFree
InterlockedIncrement
GetCurrentThreadId
HeapSize
TerminateProcess
IsDebuggerPresent
SetHandleCount
GetFileType
GetStartupInfoA
SetFilePointer
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
ReadFile
SetStdHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetLocaleInfoA
GetModuleHandleA
RaiseException
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CloseHandle
CreateFileA
gdi32
GetCharWidth32A
Sections
.text Size: 286KB - Virtual size: 285KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.badib Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.joxev Size: 512B - Virtual size: 214B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ