Static task
static1
Behavioral task
behavioral1
Sample
05a824794906a5e134070daa33f5ae83.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
05a824794906a5e134070daa33f5ae83.exe
Resource
win10v2004-20231215-en
General
-
Target
05a824794906a5e134070daa33f5ae83
-
Size
1.2MB
-
MD5
05a824794906a5e134070daa33f5ae83
-
SHA1
13d56aadec9cfe4be22d1b87c0d146b622a641ca
-
SHA256
34e03813be88304ba6c04a14620bed201a3b19ba8bdb853b36217788536b0794
-
SHA512
664fc97b681c64af6809381d9d6400d984205de6313fad03042e4c40c8a34d888b3d71945ce8d925033df73148c0a1b84e018558d36cafa0ef530d91607a94c8
-
SSDEEP
24576:nRpB7I7C6Y54f7vWPluF8dvFh7z21pJOYTS0mPdq3CEZ:x7Im6Ymf7v7F8VCjO0mPdq3CE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05a824794906a5e134070daa33f5ae83
Files
-
05a824794906a5e134070daa33f5ae83.exe windows:4 windows x86 arch:x86
db8dd3669441e44c66417529e8b4ff82
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawIconEx
IsWindow
CopyIcon
AppendMenuW
LoadCursorA
GetFocus
CopyRect
GetDlgItem
EndDialog
DrawTextA
DrawTextW
InsertMenuA
GetMenu
AppendMenuA
GetWindowTextLengthA
DialogBoxParamA
IsMenu
CopyImage
GetFocus
DialogBoxParamW
GetCursor
IsWindow
BlockInput
DrawTextW
CloseWindow
LoadCursorA
DrawIcon
InsertMenuA
DialogBoxParamA
GetMenu
GetCursor
AppendMenuA
LoadCursorA
EndDialog
GetFocus
DialogBoxParamW
AlignRects
GetDC
CopyImage
IsMenu
GetWindowTextLengthA
CloseWindow
AppendMenuW
CreateIcon
BlockInput
DrawTextA
AppendMenuW
DrawTextA
CloseWindow
AppendMenuA
DrawTextW
CopyIcon
DrawIcon
InsertMenuA
CreateIcon
GetMenu
GetDlgItem
CopyRect
LoadCursorA
AlignRects
LoadMenuA
DialogBoxParamA
CopyImage
CopyIcon
GetWindowTextA
LoadCursorA
DrawIconEx
GetDlgItem
CloseWindow
CalcMenuBar
EndDialog
GetFocus
kernel32
CreateProcessA
WriteFile
GetStdHandle
CopyFileExA
GetComputerNameA
GetConsoleMode
GetFileTime
CreateDirectoryA
FindFirstFileA
OpenFileMappingA
ExitThread
GetCPInfo
CopyFileExW
GetConsoleMode
FindAtomA
CopyFileW
GlobalFree
WriteFile
GetFileSize
CreateProcessA
CopyFileA
ReadConsoleA
GetStdHandle
CreateDirectoryA
FindFirstFileA
ExitThread
OpenFile
DeleteFileW
GetLastError
ReadFile
GetCommandLineA
OpenFile
CreateDirectoryA
GlobalFree
GetConsoleMode
DeleteAtom
FindFirstFileA
DeleteFileA
GetFileSize
CreateThread
FindAtomA
Sleep
WriteFile
GetLastError
ReadFile
GetFileTime
Sleep
GetFileSize
CopyFileW
CopyFileA
ReadConsoleA
DeleteFileW
DeleteAtom
GetCommandLineA
CopyFileExW
advapi32
RegQueryValueExA
RegQueryValueW
RegQueryValueA
RegLoadKeyA
RegQueryInfoKeyA
RegOpenKeyExW
RegDeleteKeyW
RegReplaceKeyW
RegQueryInfoKeyW
RegDeleteKeyA
RegEnumKeyExW
RegCreateKeyW
RegCreateKeyExA
RegEnumValueA
RegEnumValueW
RegFlushKey
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1.1MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.stls Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ