Static task
static1
Behavioral task
behavioral1
Sample
5845554e369e211a65c2bd319497627b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5845554e369e211a65c2bd319497627b.exe
Resource
win10v2004-20231215-en
General
-
Target
5845554e369e211a65c2bd319497627b
-
Size
17KB
-
MD5
5845554e369e211a65c2bd319497627b
-
SHA1
18b8ca2c39ccedfc520daa29a92e7ea7c0240c2f
-
SHA256
a986ba37a4ccbf693be9b511b61020f19223a37ca973eaf944a695af3d5e42c4
-
SHA512
e2b7c272087b16f90f4d23ed00416524535ce27c262fba4b46b3acff24c4db888cef97f3d2e18e52f5e2d0a558f86779280bd283a3cf7aab7a927e7c33db4bc8
-
SSDEEP
384:W43ORZr/h0NXBiFtuBWN+8euEc4aHVI2gEHs:NeXLh0hBqtta7cXm2vs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5845554e369e211a65c2bd319497627b
Files
-
5845554e369e211a65c2bd319497627b.exe windows:5 windows x86 arch:x86
b029ded94fecb3f5f44b3058e2f0de10
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryA
SetUnhandledExceptionFilter
lstrcatA
GetCurrentProcess
TerminateProcess
RtlUnwind
IsDebuggerPresent
CreateFileA
LoadLibraryA
GetProcAddress
VirtualAlloc
GetProcessHeap
UnhandledExceptionFilter
ExitProcess
user32
TranslateAcceleratorW
LoadCursorW
GetDlgItemTextW
EnableMenuItem
DefWindowProcW
UnhookWindowsHookEx
comdlg32
PrintDlgW
GetOpenFileNameW
FindTextW
CommDlgExtendedError
ChooseFontW
GetSaveFileNameW
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ