Static task
static1
Behavioral task
behavioral1
Sample
45621305ee846f339d1fa63bd4f6f6b5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
45621305ee846f339d1fa63bd4f6f6b5.exe
Resource
win10v2004-20231215-en
General
-
Target
45621305ee846f339d1fa63bd4f6f6b5
-
Size
356KB
-
MD5
45621305ee846f339d1fa63bd4f6f6b5
-
SHA1
8499f1ce6804b8880f743dc14d3353d2d4ac18e8
-
SHA256
e5da524a7ffb4abfe14296b3208b7b81186e101d550df7cc1c4f98570992ca01
-
SHA512
8bb65198cef9442af828a1b35355e5c2788b9ec4e55348413b5901e582c62a7cbe92e9b4087f21ca5d51f6b3de506d733ea09175e545c338f347aaff51e58e8d
-
SSDEEP
6144:dKymdGyi0QVxsTepp/QXfxUZLLCaP8+npyIVw0ub6zo0naG+:YJCZLeaP8upPti6PaG+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45621305ee846f339d1fa63bd4f6f6b5
Files
-
45621305ee846f339d1fa63bd4f6f6b5.exe windows:4 windows x86 arch:x86
0ba89f2097ff31df3c9341acc78e4199
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
srand
rand
kernel32
DeleteFileA
CreateFileMappingA
UnmapViewOfFile
CreateFileA
FindResourceA
FreeLibrary
LoadResource
WriteFile
SizeofResource
CreateDirectoryA
GetProcAddress
RemoveDirectoryA
LoadLibraryA
LockResource
CloseHandle
GetTempPathA
MapViewOfFile
GetTickCount
ExitProcess
GetModuleHandleA
GetFileSize
user32
SetFocus
DialogBoxParamA
EndDialog
GetDlgItem
MessageBoxExA
SendMessageA
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 308KB - Virtual size: 306KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ