Static task
static1
Behavioral task
behavioral1
Sample
0dc45eff81167ea3f541d5ca885cedbf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0dc45eff81167ea3f541d5ca885cedbf.exe
Resource
win10v2004-20231215-en
General
-
Target
0dc45eff81167ea3f541d5ca885cedbf
-
Size
58KB
-
MD5
0dc45eff81167ea3f541d5ca885cedbf
-
SHA1
97c38650b2c858388026bde06a87c7c62c8da53f
-
SHA256
41d437fb48ac8e3712c31e46c9518e5ffd65407f3e0c372a3cc4de2842e8990b
-
SHA512
d8e9d726e14fdf21d4342043f82b3dde122060f85dd829ccc19b5ac5906a1d49c1f0fc182f61ee95831d5a0cb4e441af81e62be27a6a5cf72234f7cb29fc4508
-
SSDEEP
768:CI0YfyK+3hl9sjHHHYhuD+piPiN7nyfKECuJLYpLZF+oyKHfIJ+FtlpOa60:zyNhHG6jpJ7mKEC+Ypj+oyiQylpOaV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dc45eff81167ea3f541d5ca885cedbf
Files
-
0dc45eff81167ea3f541d5ca885cedbf.exe windows:4 windows x86 arch:x86
f62c5334447b45926e094aafa3ed0821
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceA
LoadLibraryExW
CreateMutexA
GetPriorityClass
GetCurrentThreadId
CreateFileA
GlobalFree
CloseHandle
GetStdHandle
GetModuleHandleA
ReleaseMutex
TlsGetValue
SetEnvironmentVariableA
GlobalUnlock
lstrlenW
SetLastError
GetExitCodeProcess
DeleteAtom
VirtualQuery
HeapCreate
user32
DispatchMessageA
GetDlgItem
GetDC
GetIconInfo
CheckRadioButton
DrawEdge
SetFocus
DrawMenuBar
IsWindow
CreateWindowExA
CreateMenu
FillRect
CallWindowProcA
ntshrui
SetFolderPermissionsForSharing
GetNetResourceFromLocalPathA
IsPathSharedA
GetLocalPathFromNetResourceA
IsPathSharedW
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bqpuqjy Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE