Static task
static1
Behavioral task
behavioral1
Sample
05531f0cc74276e93183684a9ccf0910.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
05531f0cc74276e93183684a9ccf0910.exe
Resource
win10v2004-20231215-en
General
-
Target
05531f0cc74276e93183684a9ccf0910
-
Size
21KB
-
MD5
05531f0cc74276e93183684a9ccf0910
-
SHA1
ce01677f82bdbc0cef5d66a77ba78c630f3b5523
-
SHA256
c6101cf9effc9483d14573443565b9d8afdbddf7922035bd4d452d84a2676fb6
-
SHA512
0a21498e4d619d725ff4c38dd06fff84c2cc4cf3eb141cb1f7395497245fbecacf69874992e120b5982445eae72f764aef7fe5a7b4a99e9676ffccbb08450f5f
-
SSDEEP
384:POgHezZ7LBP5MBygdX1F4ge5OI4nzdWY/9F41gxukem:P0DM9dX11eAym
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05531f0cc74276e93183684a9ccf0910
Files
-
05531f0cc74276e93183684a9ccf0910.exe windows:4 windows x86 arch:x86
73945a5f5b894762d9ff2d4473103bbb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetModuleHandleW
LoadLibraryA
LoadLibraryW
GetCurrentProcessId
LocalFree
HeapAlloc
GetStartupInfoW
ReadFile
lstrlenW
lstrlenW
lstrcmpiW
VirtualAlloc
FreeLibrary
lstrcmpiW
WideCharToMultiByte
ExitProcess
ReadFile
HeapAlloc
EnterCriticalSection
WriteFile
GetCurrentProcess
InterlockedDecrement
CloseHandle
GetSystemTimeAsFileTime
SetLastError
SetUnhandledExceptionFilter
SetLastError
ReadFile
WaitForSingleObject
Sleep
ExitProcess
WaitForSingleObject
InitializeCriticalSection
GetCommandLineA
SetEvent
HeapDestroy
EnterCriticalSection
LocalFree
MultiByteToWideChar
CloseHandle
lstrcpyW
ExitProcess
WideCharToMultiByte
HeapReAlloc
SetEvent
CreateThread
GetACP
GetCurrentProcess
LocalFree
GetProcessHeap
GetACP
ExitProcess
QueryPerformanceCounter
QueryPerformanceCounter
InitializeCriticalSection
LocalAlloc
GetCommandLineW
LeaveCriticalSection
HeapAlloc
VirtualFree
InterlockedIncrement
VirtualAlloc
SetFilePointer
GetCommandLineW
CreateFileW
ReadFile
GetProcessHeap
GetSystemTimeAsFileTime
WaitForSingleObject
VirtualProtect
GetLastError
GetCommandLineA
GetModuleHandleW
SetLastError
lstrcmpiW
WriteFile
gdi32
StretchBlt
GetTextExtentPointW
TranslateCharsetInfo
GetTextMetricsW
CreatePatternBrush
GetTextMetricsW
RealizePalette
SetStretchBltMode
CreateCompatibleBitmap
DeleteObject
StretchBlt
CreateSolidBrush
SetStretchBltMode
SelectPalette
CreateSolidBrush
SetTextColor
CreateFontIndirectW
DeleteObject
SetTextAlign
CreateRectRgn
SetStretchBltMode
TextOutW
CreateFontIndirectW
BitBlt
LineTo
GetTextExtentPointW
CreatePatternBrush
GetDeviceCaps
SaveDC
SelectPalette
CreateRectRgn
Rectangle
CreateCompatibleDC
SelectPalette
SelectObject
GetTextExtentPointW
CreateFontIndirectW
CreatePatternBrush
SetStretchBltMode
CreateRectRgn
TextOutW
PatBlt
TranslateCharsetInfo
LineTo
MoveToEx
GetTextExtentPointW
SetWindowExtEx
RealizePalette
GetStockObject
SelectObject
CreateCompatibleBitmap
ExtTextOutW
SelectPalette
SetTextAlign
ExtTextOutW
RealizePalette
LineTo
SetTextAlign
GetTextExtentPointW
SetStretchBltMode
DeleteObject
SelectPalette
DeleteDC
GetStockObject
SetBkColor
TranslateCharsetInfo
CreatePatternBrush
CreateCompatibleBitmap
BitBlt
PatBlt
SetStretchBltMode
CreateRectRgn
DeleteDC
TranslateCharsetInfo
SetStretchBltMode
BitBlt
user32
EqualRect
ScreenToClient
PeekMessageW
GetCursorPos
PostThreadMessageW
DestroyIcon
GetLastActivePopup
KillTimer
GetWindowLongW
CreateWindowExW
DispatchMessageA
CharNextW
GetWindowRect
RegisterClipboardFormatW
PostQuitMessage
GetSubMenu
LoadCursorW
BeginDeferWindowPos
IsWindowVisible
IsRectEmpty
EndDialog
CallWindowProcW
ExitWindowsEx
ExitWindowsEx
GetFocus
GetThreadDesktop
GetCursorPos
SetRect
MapWindowPoints
EnableMenuItem
SetScrollInfo
GetDesktopWindow
InvalidateRect
FindWindowW
RegisterClassA
CloseWindowStation
SetCapture
SetRect
GetLastActivePopup
SendDlgItemMessageW
GetFocus
ReleaseDC
GetWindowLongW
CreateWindowExW
SetWindowLongA
LoadMenuW
EqualRect
SetThreadDesktop
UpdateWindow
GetSystemMetrics
CharNextA
UpdateWindow
RegisterClassExW
CloseWindowStation
PostMessageA
MapWindowPoints
GetMessageW
GetForegroundWindow
GetSysColor
DefWindowProcA
wsprintfA
SetWindowTextA
BringWindowToTop
ReleaseCapture
SetWindowTextW
SetFocus
IsWindowEnabled
LoadIconA
GetDesktopWindow
GetWindowRect
GetKeyState
DrawFocusRect
SetWindowPos
CallWindowProcW
EqualRect
FindWindowW
SetDlgItemTextW
GetMessageA
DeferWindowPos
Sections
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ