Static task
static1
Behavioral task
behavioral1
Sample
1d45e227f22429a27d5b143fe55960d3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1d45e227f22429a27d5b143fe55960d3.exe
Resource
win10v2004-20231215-en
General
-
Target
1d45e227f22429a27d5b143fe55960d3
-
Size
169KB
-
MD5
1d45e227f22429a27d5b143fe55960d3
-
SHA1
c32e4ee058027e213d933b79f4b2f225d418446d
-
SHA256
e570ac8ccbc504644ce6be9e0ab2b5220b67ad6aeaf59c252b6520d0c6a20268
-
SHA512
e94f0f7a74a66ca851e5321a843666873ab968a9ef07cf01a2ae7d3d8fa051dd97897f53fdeaea62ecd2f44fd365271ccbfca2af633692344cd1ead0e18019d9
-
SSDEEP
3072:QEaITK3zLXEw9yFILoesY/+npSj7zMtl3jFMfyF:I5hyIn7yNSqF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d45e227f22429a27d5b143fe55960d3
Files
-
1d45e227f22429a27d5b143fe55960d3.exe windows:4 windows x86 arch:x86
cbf730ff462d851eb22b7577b41a95fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMenuItemCount
GetSubMenu
SystemParametersInfoA
DispatchMessageA
GetDC
ReleaseDC
DrawStateA
DrawIconEx
OffsetRect
SetMenuItemInfoA
GetMenuItemInfoA
DestroyIcon
DrawTextA
SendMessageA
LoadImageA
LoadStringA
wvsprintfA
UnregisterClassA
RegisterClassExA
GetClassInfoExA
SetWindowLongA
SetWindowTextA
SetMenu
MoveWindow
BeginPaint
EndPaint
GetUpdateRect
InvalidateRect
IsWindowVisible
SetFocus
GetParent
SetPropA
GetPropA
DefWindowProcA
CallWindowProcA
RemovePropA
InflateRect
GetSysColor
FillRect
DrawEdge
PostMessageA
CreateWindowExA
GetClientRect
PostQuitMessage
LoadCursorA
SetCursor
SetRect
IsWindow
LoadMenuA
GetSysColorBrush
GetSystemMetrics
FindWindowA
GetLastActivePopup
IsIconic
ShowWindow
SetForegroundWindow
BringWindowToTop
LoadAcceleratorsA
GetMessageA
IsDialogMessageA
TranslateAcceleratorA
TranslateMessage
gdi32
CreateFontIndirectA
GetTextExtentPoint32A
GetStockObject
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
DeleteObject
BitBlt
SetTextColor
SetBkMode
ole32
CoCreateInstance
CoInitialize
CoFreeUnusedLibraries
CoUninitialize
comctl32
ord6
kernel32
SetUnhandledExceptionFilter
IsBadCodePtr
SetStdHandle
GetStringTypeW
GetStringTypeA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FreeLibrary
GetProcAddress
LoadLibraryA
GetCommandLineA
IsBadReadPtr
SetLastError
IsBadWritePtr
GetVersionExA
GetLastError
CreateSemaphoreA
CloseHandle
GetCurrentProcess
GetModuleFileNameA
GetShortPathNameA
SizeofResource
FindResourceA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
GetWindowsDirectoryA
CreateProcessA
IsBadStringPtrA
FindClose
FindFirstFileA
WriteFile
FlushFileBuffers
SetFilePointer
GetEnvironmentVariableA
GetPrivateProfileIntA
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
InterlockedDecrement
InterlockedIncrement
TerminateProcess
HeapReAlloc
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
advapi32
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegDeleteValueA
shell32
ShellExecuteExA
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rrdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE