Static task
static1
Behavioral task
behavioral1
Sample
45858e41327e45bc1e6f1002b2ae8191.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
45858e41327e45bc1e6f1002b2ae8191.exe
Resource
win10v2004-20231215-en
General
-
Target
45858e41327e45bc1e6f1002b2ae8191
-
Size
511KB
-
MD5
45858e41327e45bc1e6f1002b2ae8191
-
SHA1
86237aad44402bfd2fb9062a935aa2d0e8a1cd88
-
SHA256
9b435254a860711ef4e97e6c62d931b5906c2754633fc0eaa7c99982fad87e6d
-
SHA512
fcbaf94c3582ac08c31286b797d71ba8dfb47e7f3f501bf9cecab7b6ee8390e4369abff637bd63507bfe15c638d7bd590448e7d86638d2a3cfbf9f84f03b017f
-
SSDEEP
12288:65DRhJarD/cu/KcbcqktZ5eBZkup18cDl95ka1SQrXX3:65nJa0Dnh5eBHX9l9ii1X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45858e41327e45bc1e6f1002b2ae8191
Files
-
45858e41327e45bc1e6f1002b2ae8191.exe windows:4 windows x86 arch:x86
2a6cb18ae117f198b5cf67ed9b3b940b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
ScaleViewportExtEx
GdiPlayScript
SetSystemPaletteUse
GetObjectType
EnumFontFamiliesW
CloseMetaFile
ScaleWindowExtEx
GetPaletteEntries
GetWinMetaFileBits
GetCharWidthFloatA
GetOutlineTextMetricsA
DeleteEnhMetaFile
EnumEnhMetaFile
GetRandomRgn
BeginPath
SetViewportExtEx
SetMetaFileBitsEx
GetPath
GetBrushOrgEx
WidenPath
comctl32
InitCommonControlsEx
wininet
FtpDeleteFileA
GetUrlCacheGroupAttributeA
InternetTimeFromSystemTimeA
GopherFindFirstFileA
FindNextUrlCacheEntryExW
HttpSendRequestExW
kernel32
SetConsoleOutputCP
GetEnvironmentStrings
CreateFileA
GetStartupInfoA
EnumSystemLocalesA
lstrcmpiW
GetCPInfo
EnumResourceNamesA
GetTimeZoneInformation
WideCharToMultiByte
GetCurrentProcessId
GetEnvironmentStringsW
OpenFileMappingA
GetCalendarInfoA
FreeEnvironmentStringsW
GetConsoleMode
GetConsoleOutputCP
SetStdHandle
FlushFileBuffers
SetFilePointer
ExitProcess
GetProcAddress
GetTickCount
HeapCreate
LCMapStringW
SetEnvironmentVariableA
GetStringTypeW
GlobalFindAtomA
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
QueryPerformanceCounter
GetCurrentThreadId
GetUserDefaultLCID
SetConsoleCtrlHandler
TlsSetValue
RtlUnwind
LoadLibraryA
InterlockedIncrement
HeapSize
TlsGetValue
GetConsoleTitleW
LCMapStringA
CompareStringA
HeapReAlloc
SetHandleCount
GetACP
GetModuleHandleA
IsValidCodePage
GetDateFormatA
WriteFile
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
GetStringTypeA
WritePrivateProfileStructW
TlsFree
GetStdHandle
Sleep
WriteConsoleW
GetCurrentProcess
OpenMutexA
EnumSystemCodePagesW
ResetEvent
CreateMutexA
FormatMessageW
TerminateProcess
EnumTimeFormatsA
GlobalReAlloc
IsValidLocale
GetLastError
TlsAlloc
FreeLibrary
GetModuleHandleW
GetOEMCP
WriteConsoleA
VirtualAlloc
DeleteCriticalSection
HeapDestroy
GetLocaleInfoA
IsDebuggerPresent
InterlockedExchange
GetFileType
SetLastError
CloseHandle
GetProfileStringA
HeapFree
ReadFile
MultiByteToWideChar
GetTimeFormatA
VirtualFree
GetLocaleInfoW
MoveFileExA
GetConsoleCP
VirtualQuery
GetSystemTimeAsFileTime
HeapAlloc
DuplicateHandle
EnterCriticalSection
GetModuleFileNameA
UnhandledExceptionFilter
LeaveCriticalSection
GetCommandLineA
GetCurrentThread
CompareStringW
user32
DestroyIcon
GetAncestor
SetShellWindow
BroadcastSystemMessageW
CloseDesktop
CreateDesktopA
DefWindowProcA
DdeSetUserHandle
LockWindowUpdate
GetCaretPos
GetWindowRgn
SetCursorPos
GetWindowLongA
RegisterClassExA
SetScrollPos
ChangeDisplaySettingsA
PtInRect
IsRectEmpty
DrawFrame
RegisterClassA
InvalidateRgn
GetWindowLongW
UnhookWindowsHookEx
SendNotifyMessageW
OffsetRect
CreateCursor
Sections
.text Size: 354KB - Virtual size: 353KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ