04543d61bba615b50f871612ac8124907b8493fae002f29d614fa2032643705d
- SHA256 04543d61bba615b50f871612ac8124907b8493fae002f29d614fa2032643705d
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7c44a7de2a7c4175c761e08a2de5d2acd42ad3195d7686e5b8d507f99c30adc8.exe
Resource
win7-20240221-en
windows7-x64
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
7c44a7de2a7c4175c761e08a2de5d2acd42ad3195d7686e5b8d507f99c30adc8.exe
Resource
win10v2004-20240412-en
windows10-2004-x64
14 signatures
150 seconds
General
- Target 04543d61bba615b50f871612ac8124907b8493fae002f29d614fa2032643705d
- Size 145KB
- Sample240417-qtr77shf89
- SHA256 04543d61bba615b50f871612ac8124907b8493fae002f29d614fa2032643705d
- MD5 46396685d6c3c88c83d394dd4d865134
- SHA1 e99940ab28943292a4d369cf852d99b93fde7aa2
- SHA512 f82d4decea0703830ff192a6ec158436c015689a1ff9148d25cc8932e5f2e14cbd727a1ee828a3cf1965899d72fdd03da986681d7b2b58f83cf03b615dc6290f
- SSDEEP 3072:TYuZ0iOn69VopPtDUnPweDwq8qU9lytEbX2jz7SwyfjhUn4PMUX:T3Z0l69hWgtcdFm4BX
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/7c44a7de2a7c4175c761e08a2de5d2acd42ad3195d7686e5b8d507f99c30adc8.exe
File Explorer
-
04543d61bba615b50f871612ac8124907b8493fae002f29d614fa2032643705d.zip 145KB
-
7c44a7de2a7c4175c761e08a2de5d2acd42ad3195d7686e5b8d507f99c30adc8.exe.exe 229KB
7c44a7de2a7c4175c761e08a2de5d2acd42ad3195d7686e5b8d507f99c30adc8.exe
- IMPHASH 691a82025742b16964fc0a05536242f1
- SHA256 7c44a7de2a7c4175c761e08a2de5d2acd42ad3195d7686e5b8d507f99c30adc8
- MD5 ddb3205a92ff18ae17b3f9f93c7b197c
- SHA1 b77c666a2d7b1f63ba08316f9a221be6ac1f786a
- SHA512 db659ead4fd2ed186f221adf5bb9ab5b686253454eeb307ba247a99d8026c009d72ed11473d4622146c7b6cf59f445ad3b020ac3394d3f61af5bfd385b43c334
- SSDEEP 3072:lnUQviqZALXadUs0vEJimn1K29YbqYZgpLneYDR89fJ5j3UxS6MeILYS:lnUzPjflapLnsdT3U2eILY
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
10399
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
InterlockedDecrement
GetTimeFormatA
FreeEnvironmentStringsA
GetModuleHandleW
GetTickCount
VirtualFree
LoadLibraryW
GetAtomNameW
GetMailslotInfo
LCMapStringA
GetConsoleOutputCP
GetConsoleAliasesW
GetLastError
GetProcAddress
GetLongPathNameA
GetTapeStatus
GetConsoleAliasExesLengthA
HeapSize
LoadLibraryA
LocalAlloc
SetCalendarInfoW
WritePrivateProfileStringA
GetModuleFileNameA
lstrcatW
FreeEnvironmentStringsW
CompareStringA
LocalFree
CompareStringW
GetTimeZoneInformation
GetLocaleInfoW
LCMapStringW
GetStringTypeW
TlsGetValue
GetLocaleInfoA
GetProcessHeaps
TryEnterCriticalSection
MultiByteToWideChar
GetStringTypeA
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetCurrentThread
Sleep
ExitProcess
WriteFile
GetStdHandle
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
InitializeCriticalSectionAndSpinCount
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetEnvironmentVariableA
user32
GetMonitorInfoA
GetForegroundWindow
GetKeyboardType
LookupIconIdFromDirectory
gdi32
GetBoundsRect
advapi32
ObjectPrivilegeAuditAlarmA
ole32
CreateDataCache
Name
.text
Size
157KB
Virtual Size
157KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
48KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=17, id=149, productName=VS2008 build 21022, version=21022,
count=79, id=131, productName=VS2008 build 21022, version=21022,
count=37, id=132, productName=VS2008 build 21022, version=21022,
count=11, id=123, productName=VS2005 build 50727, version=50727,
count=96, id=1, productName=Unmarked objects,
count=1, id=138, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,