Static task
static1
Behavioral task
behavioral1
Sample
045f2b0354dd5f970cf52d9bf310493c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
045f2b0354dd5f970cf52d9bf310493c.exe
Resource
win10v2004-20231222-en
General
-
Target
045f2b0354dd5f970cf52d9bf310493c
-
Size
423KB
-
MD5
045f2b0354dd5f970cf52d9bf310493c
-
SHA1
e766d7eff49c24f6e745e35dfd35711ca42ef27a
-
SHA256
711e22f8b40ff8113783cad23da93d4381c78e9169c0f34211bc8a583f618f81
-
SHA512
cca3d3a90ada0b804e1fb8d3a5669887fbfdbeef93d02b31d540e20a1126b46c62c1cc0cd02f9e4c545849f53c9b738ccba4efb3ce07ed9f1fe4f53d093b3062
-
SSDEEP
12288:U17YpvNYK5huNU8jdeRrL0uvhOrbCh9hCOAm10dNwm/:wwK6kjdiLEr+SdNT/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 045f2b0354dd5f970cf52d9bf310493c
Files
-
045f2b0354dd5f970cf52d9bf310493c.exe windows:4 windows x86 arch:x86
22deaa3e5166e3019a02358581c9a9ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
_lopen
ExitProcess
user32
MessageBoxA
shell32
ShellExecuteA
Sections
Size: - Virtual size: 484KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 289KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkp Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE