Static task
static1
Behavioral task
behavioral1
Sample
05c031c0a89f268260bdafb852a34227.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
05c031c0a89f268260bdafb852a34227.exe
Resource
win10v2004-20231215-en
General
-
Target
05c031c0a89f268260bdafb852a34227
-
Size
208KB
-
MD5
05c031c0a89f268260bdafb852a34227
-
SHA1
fc29240b1bd6f9f4d87d976e7eae6e673f02fa2b
-
SHA256
06dcfe70fdcc7de0f5d0ae692c6de60e74ac86e3126b00003033db588ba536dc
-
SHA512
119bf6ab0cb586c0c9ebabd001fffc5227788e21c701658c2fc948f29f51ff6f8f0835e8447d42dc119f0d357ddd982027dd80025db5a87ee5c0a5440a3ffb85
-
SSDEEP
3072:MldkJBqUrQpJGCE7T2RxiQwhLw/2kACz41bec8hdTdHkN5p5cZpA1nXNUYIoajFv:Mld1RGDq3l/2kNqbe3MLp5QIIoaBC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05c031c0a89f268260bdafb852a34227
Files
-
05c031c0a89f268260bdafb852a34227.exe windows:4 windows x86 arch:x86
691f1193f16065947032ace3a2329e55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
fabs
comctl32
InitCommonControls
user32
IsChild
gdi32
BitBlt
ole32
CoInitialize
shell32
ShellExecuteExA
shlwapi
PathQuoteSpacesA
Sections
.MPRESS1 Size: 203KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE