Static task
static1
Behavioral task
behavioral1
Sample
05152ce30da6773ffcfb0d3946f5d5ce.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
05152ce30da6773ffcfb0d3946f5d5ce.exe
Resource
win10v2004-20231222-en
General
-
Target
05152ce30da6773ffcfb0d3946f5d5ce
-
Size
96KB
-
MD5
05152ce30da6773ffcfb0d3946f5d5ce
-
SHA1
19f650cd133e3e4e043f72091a48ae9095ef9907
-
SHA256
e53c97f9a34f526a30b33ce989692f883469c547401c8eba649a74d76d98da76
-
SHA512
b6a38ac6e4f4d2e02072edf6b89e51202e2a5105dbf0365f11e6a9edf27e2c85cdc3329aa17e49f4d338b7f490c7892f62d62a7f5bf310c00db13c8b5d3f45cd
-
SSDEEP
3072:rW5Asicy96Ur1sFvYFLLRuQtqCM+/7DML:r1n96UBy+LNuQtqCz/Pe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05152ce30da6773ffcfb0d3946f5d5ce
Files
-
05152ce30da6773ffcfb0d3946f5d5ce.exe windows:4 windows x86 arch:x86
4d91545d2506f8687c6c8bc6011e227a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
ArcTo
GetTextExtentPoint32A
GetViewportExtEx
GetFontData
GetLogColorSpaceA
DeleteDC
GetGlyphIndicesW
CreateFontA
kernel32
GetSystemDirectoryW
GetCommandLineW
ExitProcess
GetModuleHandleW
VirtualAlloc
CreateMailslotW
EnumResourceNamesW
SetLastError
SetConsoleScreenBufferSize
_llseek
GetCurrentProcessId
CopyFileA
RemoveDirectoryW
linkinfo
CompareLinkInfoVolumes
CompareLinkInfoReferents
IsValidLinkInfo
GetLinkInfoData
ResolveLinkInfoW
DestroyLinkInfo
CreateLinkInfoW
DisconnectLinkInfo
GetCanonicalPathInfoW
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.textbs Size: 5KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 92KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 96KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 96KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ