Static task
static1
Behavioral task
behavioral1
Sample
145f0fc20a06d9a74adf32fd63c8d932.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
145f0fc20a06d9a74adf32fd63c8d932.exe
Resource
win10v2004-20231215-en
General
-
Target
145f0fc20a06d9a74adf32fd63c8d932
-
Size
30KB
-
MD5
145f0fc20a06d9a74adf32fd63c8d932
-
SHA1
c46439fbada1ef5d820a1a2360cb53a7d2f6e5df
-
SHA256
b5dc2ab757abed330769dffd7741be6fb3e9c76b8a1a1b66a9849a72f1329a85
-
SHA512
edd927ef354d6ffbfa9f40a6d1acba11cc84f76649ac98243803ca2b5b35d1a3453b52d75c757004ae3ecd2941a247441d498fcc0457f2d3fe10d57c1f4b133a
-
SSDEEP
768:jDu/DYOSiAkq4ZIwg6z4lk+PEZa31bhS5lSeD:PubYbiJLZhBoEg31bhSnSW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 145f0fc20a06d9a74adf32fd63c8d932
Files
-
145f0fc20a06d9a74adf32fd63c8d932.exe windows:4 windows x86 arch:x86
f84ff1fec7866e50d95c62e55aa5da77
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
Sleep
ConnectNamedPipe
user32
SetTimer
GetFocus
CharNextA
PostQuitMessage
gdi32
Escape
Sections
.text Size: 1024B - Virtual size: 966B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ