Static task
static1
Behavioral task
behavioral1
Sample
3695633dfb15a23fa5ea08d1e0ca81ad01ea44fad3680103982376a3b8f3495bN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3695633dfb15a23fa5ea08d1e0ca81ad01ea44fad3680103982376a3b8f3495bN.exe
Resource
win10v2004-20241007-en
General
-
Target
3695633dfb15a23fa5ea08d1e0ca81ad01ea44fad3680103982376a3b8f3495bN.exe
-
Size
208KB
-
MD5
2a4adeafe1155136df6606726e894db0
-
SHA1
4242eafd1566c75190c4444bf7ebdf22576188bf
-
SHA256
3695633dfb15a23fa5ea08d1e0ca81ad01ea44fad3680103982376a3b8f3495b
-
SHA512
a1c9bc3e348dbc84c0ae1b6f2eda59da5334e46f5b9b1a634680f3d8a0f27001ea11dcb80dd9c63375a36d5abc9642ada74ed527012885b859202c1690825fef
-
SSDEEP
6144:HZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq56:5quCuygMQjd5vJIBP1p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3695633dfb15a23fa5ea08d1e0ca81ad01ea44fad3680103982376a3b8f3495bN.exe
Files
-
3695633dfb15a23fa5ea08d1e0ca81ad01ea44fad3680103982376a3b8f3495bN.exe.exe windows:4 windows x86 arch:x86
520c130e82cbe6120da2d52c754c2522
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileTime
SetEvent
FindResourceA
GetLogicalDriveStringsW
CreateThread
GetModuleHandleA
GetSystemTime
GetProcAddress
DisconnectNamedPipe
lstrlenA
CreateMutexW
GlobalGetAtomNameA
lstrcat
SetCalendarInfoW
CreateFileMappingA
SetComputerNameW
GetThreadPriority
IsBadReadPtr
GetNumberFormatA
EndUpdateResourceA
OpenFile
GetAtomNameW
GetCurrentThread
CreatePipe
GetUserDefaultLangID
GetFileType
GetFullPathNameA
RemoveDirectoryW
FatalAppExitA
lstrlenW
GlobalDeleteAtom
FindAtomW
GetModuleFileNameW
FileTimeToDosDateTime
BeginUpdateResourceW
GetEnvironmentVariableA
GetWindowsDirectoryW
lstrcatA
GetNamedPipeInfo
GetModuleHandleW
GetCalendarInfoA
GetLongPathNameA
GetEnvironmentStringsW
GetExpandedNameW
GetLogicalDrives
GetCurrentDirectoryA
lstrcpyA
GetStringTypeW
SearchPathA
lstrlen
EnumDateFormatsA
IsDebuggerPresent
GetProcessHeaps
SetThreadPriority
GetTempPathW
CreateMutexA
user32
GetIconInfo
CreateDialogParamA
GetSubMenu
GetClassInfoA
CreateAcceleratorTableW
ChildWindowFromPoint
GetScrollPos
GetSystemMetrics
LoadIconW
BringWindowToTop
RegisterWindowMessageW
LoadImageW
CreateDialogIndirectParamA
CopyRect
GetWindowTextLengthA
GetSysColor
gdi32
CreateDCA
GetPolyFillMode
GetEnhMetaFileDescriptionW
SetWorldTransform
CreateMetaFileW
SetStretchBltMode
BeginPath
GetTextCharset
CreateColorSpaceA
SetViewportOrgEx
IntersectClipRect
Ellipse
GetMetaFileBitsEx
CreateMetaFileA
GetCharWidthW
PaintRgn
GetDeviceGammaRamp
CombineRgn
EnumICMProfilesW
PlayMetaFile
GetDCOrgEx
advapi32
RegOpenKeyA
RegDeleteValueW
RegOpenKeyA
RegCloseKey
shlwapi
StrFormatByteSizeA
PathCreateFromUrlA
SHRegSetPathW
opengl32
glReadBuffer
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.PwM Size: 1KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.OwvyT Size: 3KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.MTxF Size: 1KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.XWRUxX Size: 1KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.YCYo Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tKhtUt Size: 2KB - Virtual size: 221KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 171KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ