Static task
static1
Behavioral task
behavioral1
Sample
1d45317da5b26967905c8b8715b9c987.exe
Resource
win7-20231129-en
General
-
Target
1d45317da5b26967905c8b8715b9c987
-
Size
9KB
-
MD5
1d45317da5b26967905c8b8715b9c987
-
SHA1
413a908ebbfb9a538759ae2c800f51e4e3030fbf
-
SHA256
e3402d5d7fb1cc392c9712e0fefdf6ee8a2534ae17597e90771e3178e6babb8c
-
SHA512
56c68e160dec438997fe438cf709f838f9f72b22872ecd58045b987d3f10e33cacd1b074bd7f7a4e5f04f202dbc4b45315a920b9e8b97472bcd7013efd671442
-
SSDEEP
192:rpKYjLZ8ISyh/zoLBCstGU9EC4hgSEcCykTsujFJwSxTt/sEB0C2:g8LZ8qpoUTaEC4hjEhTzFpxTt/sVC2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d45317da5b26967905c8b8715b9c987
Files
-
1d45317da5b26967905c8b8715b9c987.exe windows:4 windows x86 arch:x86
2c36f5c1c96e4405790b413ed0fe76ec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BeginUpdateResourceW
ClearCommError
CreateDirectoryExW
CreateMailslotW
EnumDateFormatsExA
ExitProcess
GetBinaryTypeW
GetCommandLineA
GetCompressedFileSizeW
GetCurrentProcess
GetEnvironmentVariableA
GetProfileIntW
GetShortPathNameA
GetVersion
HeapReAlloc
IsBadReadPtr
LocalHandle
PrepareTape
ReadConsoleInputA
SetFileTime
TlsAlloc
lstrcpynW
lstrlen
user32
ArrangeIconicWindows
ChangeDisplaySettingsExA
CharNextExA
CharToOemW
DlgDirSelectExW
GetClassInfoW
GetDlgItemInt
GetLastActivePopup
GetWindowDC
GetWindowTextLengthA
LoadIconW
MapDialogRect
OemKeyScan
OpenWindowStationW
PostMessageW
RealGetWindowClass
ScrollWindow
SendInput
SendMessageCallbackW
SetMenuItemInfoW
SetMessageExtraInfo
SetParent
SwitchDesktop
TrackPopupMenu
gdi32
AnimatePalette
CreateDIBPatternBrush
DPtoLP
GetArcDirection
GetBkMode
GetColorSpace
GetDIBColorTable
GetLayout
GetMetaFileW
GetMetaRgn
GetROP2
GetSystemPaletteUse
GetTextAlign
GetTextExtentExPointA
GetTextExtentPoint32W
PlayMetaFile
SelectObject
StartDocA
StretchBlt
StrokeAndFillPath
TextOutW
Sections
.text Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ