Static task
static1
Behavioral task
behavioral1
Sample
45f0f8743f1c27e07d07954304a373c3a50223c7f06b714475317b2b9a2ba068N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
45f0f8743f1c27e07d07954304a373c3a50223c7f06b714475317b2b9a2ba068N.exe
Resource
win10v2004-20240802-en
General
-
Target
45f0f8743f1c27e07d07954304a373c3a50223c7f06b714475317b2b9a2ba068N
-
Size
300KB
-
MD5
0be8aa5b77c48db4c3c19bb89d1f4d60
-
SHA1
452c8bd1a70312ef699a1c88c41cbcedab135ad1
-
SHA256
45f0f8743f1c27e07d07954304a373c3a50223c7f06b714475317b2b9a2ba068
-
SHA512
024cc4840df8307b95bfa7e87ca84e9f424e6e52dab408d928db678b36a621c36c7dbd15d0bdfbfa724fd568c6190fb81f09228b3314368e8390abdbb5b98061
-
SSDEEP
6144:3uzCGWp/2inm4XZ0Q1VseCWw6jPYB7ltxgpe5KNQ9SyEf9u2xBnvU:ezkjnm4JN1tjPYBv/5JEfQ2c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45f0f8743f1c27e07d07954304a373c3a50223c7f06b714475317b2b9a2ba068N
Files
-
45f0f8743f1c27e07d07954304a373c3a50223c7f06b714475317b2b9a2ba068N.exe windows:4 windows x86 arch:x86
b80b396931de243fb24efec4a534c5c1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
CloseHandle
WriteFile
CreateFileA
LockResource
GlobalAlloc
LoadResource
SizeofResource
FindResourceA
WinExec
GetModuleFileNameA
GetModuleHandleA
lstrlenA
lstrcatA
GetEnvironmentVariableA
SetCurrentDirectoryA
MoveFileA
GetSystemDirectoryA
mfc42
ord561
ord815
msvcrt
_exit
_XcptFilter
exit
__p___initenv
_onexit
__dllonexit
strchr
strrchr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__setusermatherr
printf
_initterm
__getmainargs
strncat
msvcp60
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ