Static task
static1
Behavioral task
behavioral1
Sample
0d45e6ee854d2fc1f3e05608b7454072.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0d45e6ee854d2fc1f3e05608b7454072.exe
Resource
win10v2004-20231215-en
General
-
Target
0d45e6ee854d2fc1f3e05608b7454072
-
Size
109KB
-
MD5
0d45e6ee854d2fc1f3e05608b7454072
-
SHA1
8891cd4478ac5256cbd315347fc06f26cd4fa6b4
-
SHA256
7dae0db3fefeff2917077b49c0297e55fdf805a44e57f38047e6f609bd14cdd8
-
SHA512
eb35cf00a2360841d8469195267014310feb4e9a59d1fedb45db8e582d71c3f0215b6f815202c4025e63ef99892108c39c5ee014f4a3d50a4bf811ae665da8c9
-
SSDEEP
3072:bejdNUdSaFyai6I3LyZreI36TZusnyEX7MAF:aZNUdjQa4S3syEAAF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d45e6ee854d2fc1f3e05608b7454072
Files
-
0d45e6ee854d2fc1f3e05608b7454072.exe windows:5 windows x86 arch:x86
ca8df603f2858fd1d5322a11654b5a22
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
DeleteFileW
GetNumberFormatA
lstrcmpiA
GlobalReAlloc
GetStringTypeExA
SetThreadLocale
IsDBCSLeadByte
GetModuleFileNameW
LocalFree
InterlockedIncrement
VirtualProtect
GetSystemTime
DuplicateHandle
GlobalAlloc
GetUserDefaultLangID
GetCurrentThreadId
GlobalFree
GlobalLock
WaitForSingleObject
msvcrt
_exit
__p__fmode
__p___initenv
fopen
__getmainargs
_controlfp
wcslen
malloc
sinh
_onexit
_XcptFilter
__set_app_type
fputc
realloc
__p__commode
_except_handler3
__p__environ
_stricmp
atoi
__setusermatherr
calloc
__dllonexit
_adjust_fdiv
free
_initterm
_strnicmp
strncpy
comdlg32
GetOpenFileNameA
user32
IsWindowVisible
GetParent
GetMenuItemID
GetWindowThreadProcessId
GetTopWindow
GetClientRect
ReleaseCapture
GetForegroundWindow
GetSubMenu
GetWindowLongA
EndPaint
DrawTextA
TranslateMessage
SetDlgItemTextA
advapi32
CheckTokenMembership
CryptCreateHash
GetSecurityDescriptorDacl
RegOpenKeyA
OpenServiceW
OpenSCManagerW
CryptReleaseContext
RegQueryValueExA
SetSecurityDescriptorOwner
CryptDestroyHash
RegDeleteValueW
RegEnumKeyExW
AddAccessAllowedAce
gdi32
SelectClipPath
ExtTextOutA
SelectPalette
TextOutA
GetTextFaceW
StrokeAndFillPath
PolyBezierTo
SelectObject
OffsetRgn
GetTextMetricsA
GetClipRgn
comctl32
ImageList_GetIconSize
InitializeFlatSB
ImageList_GetBkColor
CreateStatusWindowA
ImageList_SetIconSize
ImageList_DragShowNolock
CreateToolbarEx
ImageList_DragEnter
ImageList_SetImageCount
ole32
CoInitialize
RegisterDragDrop
CoGetMalloc
CreateILockBytesOnHGlobal
RevokeDragDrop
CLSIDFromProgID
OleUninitialize
CoRevokeClassObject
CoSetProxyBlanket
StringFromGUID2
OleSetClipboard
CreateStreamOnHGlobal
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ