Static task
static1
Behavioral task
behavioral1
Sample
385de8fdaf641abbcfcbd3a6829719fbab045df62ffe1547244bc9bb37546cc8.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
385de8fdaf641abbcfcbd3a6829719fbab045df62ffe1547244bc9bb37546cc8.exe
Resource
win10v2004-20241007-en
General
-
Target
385de8fdaf641abbcfcbd3a6829719fbab045df62ffe1547244bc9bb37546cc8.exe
-
Size
114KB
-
MD5
b896a9538cb9ba6bf7e1fca4692f1f8f
-
SHA1
c3241416ac2d252b547646b9b60d516f6e4e8e9a
-
SHA256
385de8fdaf641abbcfcbd3a6829719fbab045df62ffe1547244bc9bb37546cc8
-
SHA512
435a613c06edf7effa4da92c698baa5d534601fae1e769a703111e219ac431d66bbf9f411fb86454ae4875d180593fada4e93e3d115fa1b4ac81de5b09f8b972
-
SSDEEP
3072:LcN+zAVSlAUXEdge4+GKwWjx34Zo+7l3J:uTVSlDAge4UwWdG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 385de8fdaf641abbcfcbd3a6829719fbab045df62ffe1547244bc9bb37546cc8.exe
Files
-
385de8fdaf641abbcfcbd3a6829719fbab045df62ffe1547244bc9bb37546cc8.exe.exe windows:4 windows x86 arch:x86
3d38256fce967372119b4c50357ea61b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapCreate
IsBadStringPtrA
GetFileTime
GetCurrentDirectoryA
WriteConsoleW
GetFileSize
SetPriorityClass
IsValidLocale
lstrlenW
GetFileAttributesA
ReadFile
GetLastError
IsBadCodePtr
lstrcpyW
FindResourceA
GetModuleHandleA
WriteConsoleW
CloseHandle
WriteConsoleW
GetStartupInfoA
ReleaseMutex
msftedit
RichComboBoxWndProc
RichEditWndProc
RichListBoxWndProc
SetCustomTextOutHandlerEx
shell32
ShellMessageBoxW
DuplicateIcon
SHGetMalloc
SHGetFolderPathA
ExtractIconW
ShellAboutA
SHGetFileInfoA
ShellAboutA
FreeIconList
ShellMessageBoxW
DragQueryFileA
DragAcceptFiles
StrChrA
msasn1
ASN1BERDecEoid
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 1024B - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE