Static task
static1
Behavioral task
behavioral1
Sample
45e30a39c0ff05812d942431c1516772.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
45e30a39c0ff05812d942431c1516772.exe
Resource
win10v2004-20231215-en
General
-
Target
45e30a39c0ff05812d942431c1516772
-
Size
114KB
-
MD5
45e30a39c0ff05812d942431c1516772
-
SHA1
a3d3f511fbe7ca6fe8e22fbb18eef597f0ef8f3e
-
SHA256
d0ef984d24093ce29afba5c10650cd749759e19ce81aa67bcbea4b76052e5253
-
SHA512
4a440148d0f440f16d6e363ad69e05084e40eae659ad47c25053005ed6228ff9aeb788cfeaa25dcdd49f0751f614b2f17dc9c7294ecddc4405b266099546a5e9
-
SSDEEP
1536:g1VPvh/81hTx5n2sR7GCjdp87t92tzJOxvxgidzdRty:gnu1hT2sR7o7tIExJFdxRty
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45e30a39c0ff05812d942431c1516772
Files
-
45e30a39c0ff05812d942431c1516772.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.vmp0 Size: 107KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE