Static task
static1
Behavioral task
behavioral1
Sample
45c37f102bd2a51aabdaa5760862f6325f6d5bb3acc7ba607a1a7eb9509aaec0.exe
Resource
win7-20230831-en
General
-
Target
45c37f102bd2a51aabdaa5760862f6325f6d5bb3acc7ba607a1a7eb9509aaec0
-
Size
2.0MB
-
MD5
462b88fdf36e363b356fc0d5b5d0456d
-
SHA1
b3ac3b6d92220a31653bf6a5cbc93f0f18b32755
-
SHA256
45c37f102bd2a51aabdaa5760862f6325f6d5bb3acc7ba607a1a7eb9509aaec0
-
SHA512
ac4a3c9ba3293f19ad1e120bbb86804282a427edce295da6e5bb502430ee03e613cb544774ad229c64955870c177ca7fb51c7f097547b5087d61257a1094f6a1
-
SSDEEP
49152:9/fsZwJcdfuZz5XGH4a+ySc7MSbiW14LJRGboyW/ssO:xfglAjGp+ySYMKiW14LJRMocsO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45c37f102bd2a51aabdaa5760862f6325f6d5bb3acc7ba607a1a7eb9509aaec0
Files
-
45c37f102bd2a51aabdaa5760862f6325f6d5bb3acc7ba607a1a7eb9509aaec0.exe windows:4 windows x86
49216cbf1bb4d9a34f1c4db3cad1102f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SysFreeString
GetErrorInfo
SafeArrayPtrOfIndex
advapi32
RegQueryValueExA
RegSetValueExA
user32
GetKeyboardType
CreateWindowExA
kernel32
GetACP
TlsSetValue
lstrlenA
Sleep
GetProcessId
gdi32
UnrealizeObject
version
VerQueryValueA
ole32
CoTaskMemFree
CoInitialize
CoUninitialize
shell32
ShellExecuteExW
ShellExecuteA
ShellExecuteA
comctl32
_TrackMouseEvent
InitCommonControls
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 944KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ