Static task
static1
Behavioral task
behavioral1
Sample
45730b376680f0cf7c6d2f5db995794a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
45730b376680f0cf7c6d2f5db995794a.exe
Resource
win10v2004-20231215-en
General
-
Target
45730b376680f0cf7c6d2f5db995794a
-
Size
54KB
-
MD5
45730b376680f0cf7c6d2f5db995794a
-
SHA1
186634f47bb5af8c1db186535cb7f377cbbb1e0f
-
SHA256
2868c48cc2dffc91a95d9e406e0273a64d98b414eb278001779d77a5d334ec1d
-
SHA512
bc452c9a4e17701191c154dbc80383d34ac62cc46e0770957d8e29b139016090ee0b3d82cdacaef35a0fc93356bb3738868a07343279798fabc4d18dfafda27c
-
SSDEEP
1536:ptV6HGavBgaOhRc9lDu3wF5UHFNSCartbNTDmME:ptVqnvyhRSDlFL3zOME
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45730b376680f0cf7c6d2f5db995794a
Files
-
45730b376680f0cf7c6d2f5db995794a.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
. Size: 155KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ