Static task
static1
Behavioral task
behavioral1
Sample
45e57bbbba1c41bff68b0501a5fd4247.exe
Resource
win7-20231215-en
General
-
Target
45e57bbbba1c41bff68b0501a5fd4247.exe
-
Size
93KB
-
MD5
45e57bbbba1c41bff68b0501a5fd4247
-
SHA1
865b8797d2e3727dd5ea761d4e434be82f0075f0
-
SHA256
fd0a792d2d8517e00891dc6b9b3de77590c9a55ed9b90e098a59ab1ed7dbe34e
-
SHA512
177c42f0e83be2477685beac13c0b18ddee8ae95a63c07a655bd14250b30ae1a4f3cb10b9f672c90df82524bab03c88430aff69874b2d18824a1885cf7c4810b
-
SSDEEP
1536:KZjaVViQrpmZke4e1lUWPDMo2OPhzr2+pC3I/3fHpMp2K+ZOWusI+JiJb:c2eQ84Q1DD+4Ca5K4Bj7u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45e57bbbba1c41bff68b0501a5fd4247.exe
Files
-
45e57bbbba1c41bff68b0501a5fd4247.exe.exe windows:5 windows x86 arch:x86
0431e04e8d74f9ed2a829cacf8db7410
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnableScrollBar
GetWindowLongA
GetClipboardViewer
SetWindowTextA
BeginPaint
IsDlgButtonChecked
EndPaint
LoadIconA
LoadCursorA
RegisterClassExA
CheckDlgButton
CreateWindowExA
ShowWindow
UpdateWindow
TranslateMessage
DispatchMessageA
GetMessageA
gdi32
CreatePatternBrush
SetBkMode
SetMapMode
GetStockObject
CreatePen
CreateEllipticRgn
DeleteObject
ole32
CoGetCallerTID
CoWaitForMultipleHandles
StgIsStorageFile
CoIsOle1Class
CoGetTreatAsClass
OleSetContainedObject
CoUnmarshalHresult
kernel32
GetACP
InterlockedExchange
QueryPerformanceFrequency
EnterCriticalSection
InitializeCriticalSection
GetFileAttributesExA
GetLastError
HeapAlloc
HeapCreate
InterlockedExchangeAdd
HeapFree
GetModuleHandleA
HeapDestroy
DeleteCriticalSection
LeaveCriticalSection
GetStartupInfoA
GetCommandLineA
GetEnvironmentStrings
Sections
.text Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE