Static task
static1
Behavioral task
behavioral1
Sample
745f3872c92014baad32cd79d3af6aa1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
745f3872c92014baad32cd79d3af6aa1.exe
Resource
win10v2004-20231215-en
General
-
Target
745f3872c92014baad32cd79d3af6aa1
-
Size
50KB
-
MD5
745f3872c92014baad32cd79d3af6aa1
-
SHA1
968128e72f81347bfb8e8ce3dd6ce9bb566c37af
-
SHA256
30b564bb0e6f52710c9d59c198852d7e73a8c901f0ecf708fbf546df3e4beb60
-
SHA512
0d4066b11e6edf1827899fbd7fc23229a5abfc2ee1ee8d7414667c37232d763896323a15c8ac0e20ef0aa019c605dfd9d77cdda8f55b095a309abd6233932fa0
-
SSDEEP
1536:b3yUt/UaoXHU4aDkvsQBR6hCnsFHyi7sR:bCU+aaMwUVAnOS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 745f3872c92014baad32cd79d3af6aa1
Files
-
745f3872c92014baad32cd79d3af6aa1.exe windows:4 windows x86 arch:x86
ff0c8a513e404fd2a32ff8b16013bd12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindAtomA
ExitThread
GetFileSize
LoadLibraryA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ