Static task
static1
Behavioral task
behavioral1
Sample
145f9472f38ccbe474cdd27c6ede30f3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
145f9472f38ccbe474cdd27c6ede30f3.exe
Resource
win10v2004-20231222-en
General
-
Target
145f9472f38ccbe474cdd27c6ede30f3
-
Size
282KB
-
MD5
145f9472f38ccbe474cdd27c6ede30f3
-
SHA1
9c9022dd0a388f6c4ed135e244073195fb90e8b3
-
SHA256
a71971ddd2a34c3ed65565d9a1f668f54a59e48a1d53c1030e35f60ff682740d
-
SHA512
1a097b163b1489a2aeffd0b4fceb8c9fbbe877e55cf61d6f4ba80b49865a5a700dfc1b6737df97f4a8146918b7286aca4173d4f488092bd800887bc0bdb4a513
-
SSDEEP
6144:wwgM03hO1Gw64OU4OttDPGigknGDjvzYR05CFc/SnODsVZQ:PgM03sA3uttDDgk6vzYR05Mc/QO2Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 145f9472f38ccbe474cdd27c6ede30f3
Files
-
145f9472f38ccbe474cdd27c6ede30f3.exe windows:4 windows
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 235KB - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE