Static task
static1
Behavioral task
behavioral1
Sample
f045db38d511897cc39a006482351bdc6c398469d1bd33ea1fa7ea8cbdf2ea93.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
f045db38d511897cc39a006482351bdc6c398469d1bd33ea1fa7ea8cbdf2ea93.exe
Resource
win10v2004-20241007-en
General
-
Target
f045db38d511897cc39a006482351bdc6c398469d1bd33ea1fa7ea8cbdf2ea93
-
Size
208KB
-
MD5
0bcb1fbf012b5a6871a6df155c6db27f
-
SHA1
c6952514a3415d5982f5a30e7b859e1434e03e87
-
SHA256
f045db38d511897cc39a006482351bdc6c398469d1bd33ea1fa7ea8cbdf2ea93
-
SHA512
87c22b844fa800a92d56111730e9da3cdcb6e28ccce05e85d745f87d6aacd1302a7675862c1ef2c5a30a8a088fc0ac98b8b9bf68eaa08bd8c02d2e9378bfd4be
-
SSDEEP
6144:nZWia9ubuBsyGvMwlvaB8Mi5vz9IGePA+hq5e:ZquCuygMQjd5vJIBP17
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f045db38d511897cc39a006482351bdc6c398469d1bd33ea1fa7ea8cbdf2ea93
Files
-
f045db38d511897cc39a006482351bdc6c398469d1bd33ea1fa7ea8cbdf2ea93.exe windows:4 windows x86 arch:x86
520c130e82cbe6120da2d52c754c2522
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileTime
SetEvent
FindResourceA
GetLogicalDriveStringsW
CreateThread
GetModuleHandleA
GetSystemTime
GetProcAddress
DisconnectNamedPipe
lstrlenA
CreateMutexW
GlobalGetAtomNameA
lstrcat
SetCalendarInfoW
CreateFileMappingA
SetComputerNameW
GetThreadPriority
IsBadReadPtr
GetNumberFormatA
EndUpdateResourceA
OpenFile
GetAtomNameW
GetCurrentThread
CreatePipe
GetUserDefaultLangID
GetFileType
GetFullPathNameA
RemoveDirectoryW
FatalAppExitA
lstrlenW
GlobalDeleteAtom
FindAtomW
GetModuleFileNameW
FileTimeToDosDateTime
BeginUpdateResourceW
GetEnvironmentVariableA
GetWindowsDirectoryW
lstrcatA
GetNamedPipeInfo
GetModuleHandleW
GetCalendarInfoA
GetLongPathNameA
GetEnvironmentStringsW
GetExpandedNameW
GetLogicalDrives
GetCurrentDirectoryA
lstrcpyA
GetStringTypeW
SearchPathA
lstrlen
EnumDateFormatsA
IsDebuggerPresent
GetProcessHeaps
SetThreadPriority
GetTempPathW
CreateMutexA
user32
GetIconInfo
CreateDialogParamA
GetSubMenu
GetClassInfoA
CreateAcceleratorTableW
ChildWindowFromPoint
GetScrollPos
GetSystemMetrics
LoadIconW
BringWindowToTop
RegisterWindowMessageW
LoadImageW
CreateDialogIndirectParamA
CopyRect
GetWindowTextLengthA
GetSysColor
gdi32
CreateDCA
GetPolyFillMode
GetEnhMetaFileDescriptionW
SetWorldTransform
CreateMetaFileW
SetStretchBltMode
BeginPath
GetTextCharset
CreateColorSpaceA
SetViewportOrgEx
IntersectClipRect
Ellipse
GetMetaFileBitsEx
CreateMetaFileA
GetCharWidthW
PaintRgn
GetDeviceGammaRamp
CombineRgn
EnumICMProfilesW
PlayMetaFile
GetDCOrgEx
advapi32
RegOpenKeyA
RegDeleteValueW
RegOpenKeyA
RegCloseKey
shlwapi
StrFormatByteSizeA
PathCreateFromUrlA
SHRegSetPathW
opengl32
glReadBuffer
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.PwM Size: 1KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.OwvyT Size: 3KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.MTxF Size: 1KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.XWRUxX Size: 1KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.YCYo Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tKhtUt Size: 2KB - Virtual size: 221KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 171KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ