Static task
static1
Behavioral task
behavioral1
Sample
345d80b2568509a1187edc0202c794d6ec6f6d9cccbbd0521ef632bc4bd63889.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
345d80b2568509a1187edc0202c794d6ec6f6d9cccbbd0521ef632bc4bd63889.exe
Resource
win10v2004-20230915-en
General
-
Target
345d80b2568509a1187edc0202c794d6ec6f6d9cccbbd0521ef632bc4bd63889
-
Size
20KB
-
MD5
a6688e2a81230050e0a6885e68a73b71
-
SHA1
d306872b7475177c42029aaf3af3d9041be879ef
-
SHA256
345d80b2568509a1187edc0202c794d6ec6f6d9cccbbd0521ef632bc4bd63889
-
SHA512
cc1bd7a6aefdcc148e564d999ee28be453e38030c69c7c56347be0fdf34b8279211d9f591456840c2304a7f2b8639b1fb2709ba666f93c7f4a584aab64b7bf07
-
SSDEEP
384:x6M+djqsU5PzD+AVAddTcRO+h/Af/mP98RTdjf26WcK:x1Kdv+hof/f1JvWc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 345d80b2568509a1187edc0202c794d6ec6f6d9cccbbd0521ef632bc4bd63889
Files
-
345d80b2568509a1187edc0202c794d6ec6f6d9cccbbd0521ef632bc4bd63889.exe windows:5 windows x64
6ea058edb18c5550d264321ac9020d6c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
advapi32
IsTextUnicode
user32
OpenClipboard
EmptyClipboard
CloseClipboard
SetClipboardData
msvcrt
__lconv_init
signal
_wcmdln
__winitenv
_initterm
_fpreset
_cexit
exit
__set_app_type
__wgetmainargs
_amsg_exit
__setusermatherr
malloc
memcpy
__C_specific_handler
memset
wcsncmp
kernel32
TlsGetValue
DeleteCriticalSection
LoadLibraryW
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
Sleep
SetUnhandledExceptionFilter
GetStartupInfoW
GetConsoleMode
LockResource
LoadResource
GetProcAddress
FindResourceExW
WriteConsoleW
GetConsoleOutputCP
WideCharToMultiByte
WriteFile
SetLastError
LocalFree
LeaveCriticalSection
HeapFree
HeapAlloc
GetProcessHeap
FormatMessageW
EnterCriticalSection
GetFileType
GetLastError
GetStdHandle
GlobalAlloc
GlobalFree
GlobalLock
GlobalReAlloc
GlobalSize
GlobalUnlock
ReadFile
InitializeCriticalSection
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 396B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ