Static task
static1
Behavioral task
behavioral1
Sample
05058ae9f47d516753521b21a78dee59.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
05058ae9f47d516753521b21a78dee59.exe
Resource
win10v2004-20231215-en
General
-
Target
05058ae9f47d516753521b21a78dee59
-
Size
80KB
-
MD5
05058ae9f47d516753521b21a78dee59
-
SHA1
d7dea790d4db47c44c738b63d2739e86073f115c
-
SHA256
81832b4236156721a35611ac290caebc8f738936002470910e0afc19461ba1a6
-
SHA512
1ab9a72727e433cf142694b04e72d3c84bc0558d76997f52781f745032cf91de68b0e2e3662a729234a77eca73c56059bc9a97cbc563cbd234d30e9c68a6d0fa
-
SSDEEP
1536:qzzhNIKxqDx+Sj7fnzV+wfw5fb2fIYHaaYKjakNZq+lNKu:2tKKxsF+wkb2QZ9tkNZqpu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05058ae9f47d516753521b21a78dee59
Files
-
05058ae9f47d516753521b21a78dee59.exe windows:4 windows x86 arch:x86
82f2c9d687c2cb2b1d4e7d9cf6c90d03
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLongPathNameA
GetSystemDirectoryA
HeapCreate
CreateSemaphoreW
GetModuleHandleA
MoveFileExW
GetCurrencyFormatA
LoadLibraryA
GetDiskFreeSpaceA
GetTapePosition
IsValidLocale
GetCommandLineW
GetProcAddress
FileTimeToLocalFileTime
VirtualAlloc
InterlockedCompareExchange
GetProcessWorkingSetSize
ExitProcess
GetLastError
GetTapeParameters
ConvertDefaultLocale
OpenEventW
GetCurrencyFormatW
MapViewOfFileEx
OutputDebugStringA
VirtualProtect
GetModuleHandleW
OpenFile
LeaveCriticalSection
msvcrt
_mbsnccnt
isalnum
__p___mb_cur_max
__p___argv
isspace
ispunct
qsort
isprint
memcpy
isupper
_flsbuf
user32
GetFocus
GetDlgItemInt
PrivateExtractIconExA
LoadStringW
InvalidateRect
ShowWindow
EnableWindow
TranslateMessage
ModifyMenuW
DefWindowProcW
CloseClipboard
GetClassNameW
FindWindowW
GetDC
gdi32
CreatePatternBrush
GetNearestPaletteIndex
SetViewportExtEx
CreateSolidBrush
CreateDIBSection
GetNearestColor
GetDeviceCaps
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.crt Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 106B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ