Static task
static1
Behavioral task
behavioral1
Sample
b45ae8dabc0e3d299a47425c624d526ce6668728499307d77acb6266f4c4ae29N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b45ae8dabc0e3d299a47425c624d526ce6668728499307d77acb6266f4c4ae29N.exe
Resource
win10v2004-20241007-en
General
-
Target
b45ae8dabc0e3d299a47425c624d526ce6668728499307d77acb6266f4c4ae29N.exe
-
Size
376KB
-
MD5
b09aca00a8dcded70eeac6ec2b497e60
-
SHA1
9247ba9335b88b4fc1d8febed66e92e4aad8317c
-
SHA256
b45ae8dabc0e3d299a47425c624d526ce6668728499307d77acb6266f4c4ae29
-
SHA512
f3c2a80cb592a721f454773f8aed5ba09b96641325effaa92821be9a3d80e99522100610c10ce9d4dd8ab97a60f182b9e9a3a7d1dd18505658858dcb30ccef02
-
SSDEEP
6144:J+lMnaN9yLmfyoZjcbxstF8cIxnTYI4LVmKJ7t2AQeRi:8TN9xyomFstF8conTCLVzTZRi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b45ae8dabc0e3d299a47425c624d526ce6668728499307d77acb6266f4c4ae29N.exe
Files
-
b45ae8dabc0e3d299a47425c624d526ce6668728499307d77acb6266f4c4ae29N.exe.exe windows:4 windows x86 arch:x86
c02324f42030ee0549c2c87e6963d969
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmp
lstrcatA
CopyFileW
user32
CharPrevA
UnionRect
GetClassInfoExW
RegisterClipboardFormatA
EmptyClipboard
CreatePopupMenu
MoveWindow
IsCharAlphaW
RegisterWindowMessageA
IsClipboardFormatAvailable
GetDoubleClickTime
CharToOemA
SetRectEmpty
TranslateAcceleratorA
ReleaseDC
mpr
WNetGetConnectionA
WNetDisconnectDialog
WNetCancelConnectionA
advapi32
GetServiceKeyNameA
msvcrt
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_except_handler3
_initterm
__getmainargs
_acmdln
_dup
asin
_controlfp
__setusermatherr
_wspawnlp
__dllonexit
_onexit
asin
_wspawnvpe
lz32
LZStart
gdi32
Pie
SetWindowOrgEx
SelectPalette
CreateRectRgn
GetPixel
BeginPath
GetGlyphOutlineA
GetKerningPairsA
GetTextFaceA
ExtTextOutA
CreatePen
GetTextMetricsA
CopyEnhMetaFileA
FillPath
SetBkMode
PatBlt
UnrealizeObject
GetEnhMetaFileHeader
StretchBlt
GetEnhMetaFilePaletteEntries
CombineRgn
ResetDCW
GetObjectA
CreateFontA
SetViewportExtEx
GetROP2
RealizePalette
MoveToEx
EndDoc
CreateCompatibleDC
GetBrushOrgEx
Chord
GetMapMode
SetRectRgn
Ellipse
PolyPolyline
GetTextAlign
DPtoLP
GetCharWidthA
mfc42
ord1576
ord561
ord3738
ord4424
ord1075
ord4080
ord3079
ord3825
ord3831
ord3830
ord1023
ord2976
ord3081
ord2985
ord3262
ord1073
ord4465
ord3259
ord1064
ord2982
ord1090
ord5714
ord1081
ord5307
ord4698
ord1001
ord2725
ord5302
ord1059
ord3346
ord2396
ord1017
ord1089
ord3922
ord815
ord6375
ord4486
ord2554
ord1071
ord5731
ord1168
Sections
.text Size: 240KB - Virtual size: 238KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ