Static task
static1
Behavioral task
behavioral1
Sample
450642d3c45c1665f3ae6d5556314212e1735f1a177a686f3dc37fda8a9dbf85.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
450642d3c45c1665f3ae6d5556314212e1735f1a177a686f3dc37fda8a9dbf85.exe
Resource
win10v2004-20230703-en
General
-
Target
450642d3c45c1665f3ae6d5556314212e1735f1a177a686f3dc37fda8a9dbf85
-
Size
510KB
-
MD5
325fb0117e9a4d0d391bdf12db641c3f
-
SHA1
f8ba4be18681ce8f348cffe34220094e3be858f8
-
SHA256
450642d3c45c1665f3ae6d5556314212e1735f1a177a686f3dc37fda8a9dbf85
-
SHA512
befb9ee325ed0175133a48bbe2f10b57f44d42d3c4eb259e9f1381601f437942f41eb1e7f407d49ab39d48aea6418360ed5dde021e949191e0b05aa9fc7c7fe2
-
SSDEEP
1536:kjbT6dHroveymHKf5AmywdWfkdHroveymHKf5AmywdWf7Ae4/y1HqJZaARKOv:kj3MfefXb4/yGa2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 450642d3c45c1665f3ae6d5556314212e1735f1a177a686f3dc37fda8a9dbf85
Files
-
450642d3c45c1665f3ae6d5556314212e1735f1a177a686f3dc37fda8a9dbf85.exe windows x86
8bd07defbd5f58eddcabadb364ba222a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoW
GetSystemTimeAsFileTime
GetTickCount
GetVersionExW
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__lconv_init
__set_app_type
__setusermatherr
__wgetmainargs
__winitenv
_amsg_exit
_cexit
_fpreset
_initterm
_iob
_lock
_onexit
_unlock
_wcmdln
abort
calloc
exit
free
fwrite
malloc
memmove
rand
signal
strncmp
vfprintf
gdi32
BitBlt
CreateCompatibleDC
DeleteDC
DeleteObject
GetObjectW
GetStockObject
SelectObject
StretchBlt
user32
BeginPaint
CreateWindowExW
DefWindowProcW
DialogBoxParamW
DispatchMessageW
EndPaint
GetClientRect
GetCursorPos
GetForegroundWindow
GetMessageW
GetSystemMetrics
InvalidateRect
IsWindow
KillTimer
LoadIconW
LoadImageW
LoadStringW
MessageBoxW
PostMessageW
PostQuitMessage
RegisterClassW
SetCursor
SetTimer
ShowWindow
TranslateMessage
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 471KB - Virtual size: 471KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rossym Size: 22KB - Virtual size: 22KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ