?CloseWindowStationCloseWi
Static task
static1
Behavioral task
behavioral1
Sample
646202e3250419ef6b755d45e2a17c01.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
646202e3250419ef6b755d45e2a17c01.exe
Resource
win10v2004-20231215-en
General
-
Target
646202e3250419ef6b755d45e2a17c01
-
Size
172KB
-
MD5
646202e3250419ef6b755d45e2a17c01
-
SHA1
19fb63e76bc14cee42731a854f1b793b3e559723
-
SHA256
46c0099e76be84e25aad5295ffdcf8c22cec83e16fd2e9a9e0d5058eef092399
-
SHA512
c33b105af9766d63920d3f41122ae4d88ec47960519524d307d14f3256e639353c8332556c5956490ca58febb824d9ce9c79a2bcf01a47821b95ad5baa4ba4de
-
SSDEEP
3072:Yx6DxN6EDAOlofpwZfziNBtKoFCS8z3Z5v7EqZBfLLLDfW9Xv6Gb0dc:tDxN6EDLsOxTvv73ZBS/6s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 646202e3250419ef6b755d45e2a17c01
Files
-
646202e3250419ef6b755d45e2a17c01.exe windows:5 windows x86 arch:x86
284f0460785cad6dd2cd6c8a3b378a37
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyMenu
kernel32
GlobalAlloc
GlobalGetAtomNameA
lstrcmpA
SetupComm
GetComputerNameExW
IsBadStringPtrA
OpenFileMappingW
GetThreadLocale
GetUserDefaultUILanguage
FormatMessageA
SetFileAttributesA
CreateEventW
FileTimeToSystemTime
GetModuleFileNameW
MultiByteToWideChar
AreFileApisANSI
GetVersionExA
OpenFileMappingA
Exports
Exports
Sections
.text Size: 158KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rewf Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sddfd Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wqwq Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wqwewe Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aewew Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ