Static task
static1
Behavioral task
behavioral1
Sample
5ac45eb4467397572071b37924bf4ca6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5ac45eb4467397572071b37924bf4ca6.exe
Resource
win10v2004-20231222-en
General
-
Target
5ac45eb4467397572071b37924bf4ca6
-
Size
76KB
-
MD5
5ac45eb4467397572071b37924bf4ca6
-
SHA1
3a200da6e98bae2cdff4bb5cac82012b734cb0fe
-
SHA256
4894735d4011a058ed9fcaeb08ba4dd2914cd6d54c73a341791267f230c5a561
-
SHA512
ef52e57610fe1aa3bb63b741f1f18c32ab7739c518de389fd2e6d190dc982ff21036f88f8ab7e7485e1f56b082696d3876adaf50c90f4079a22db69f6c53a036
-
SSDEEP
1536:Kpi4wDWclrx7XTrlIcEYJHlARhEzFYij5zzA71jxpjVrs2ryrd1vUQuq6:KpnwDzL3FtHkazFd53axxHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ac45eb4467397572071b37924bf4ca6
Files
-
5ac45eb4467397572071b37924bf4ca6.exe windows:4 windows x86 arch:x86
73c2d730d2ddff936f02cd316fc58093
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
SetCurrentDirectoryA
BaseUpdateAppcompatCache
LoadLibraryExW
FindActCtxSectionStringA
CreateTapePartition
CreateFiber
CreateNamedPipeA
WritePrivateProfileSectionA
Beep
GetComputerNameW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE