Static task
static1
Behavioral task
behavioral1
Sample
05b75cc5c84efc2cb66841064f9226ac.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
05b75cc5c84efc2cb66841064f9226ac.exe
Resource
win10v2004-20231215-en
General
-
Target
05b75cc5c84efc2cb66841064f9226ac
-
Size
161KB
-
MD5
05b75cc5c84efc2cb66841064f9226ac
-
SHA1
a653849f7d9d91b498585a0458c46336c12e550c
-
SHA256
c6ee0475fe3732acdc820f9939bc2ef3e4d201c2d085b6f97d9f239fae98e04b
-
SHA512
60f23ff7eed22bcfac5221283e16b0c4fd22897ddcc906245aa21df235a2b619939ef8c85850ece4d3a5ccb96699c4431c80f40cab6c85cf16dd5e82920a1a5d
-
SSDEEP
3072:ZHUTiEcS5BY2LMNLjutONBAuzltRf/agCLLYuoc2NLsO:ZD9S5B1MIABhp3uLTiN3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05b75cc5c84efc2cb66841064f9226ac
Files
-
05b75cc5c84efc2cb66841064f9226ac.exe windows:5 windows x86 arch:x86
7165f5b4d25d00be020491090d1c8a6a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
AlignRects
DialogBoxParamA
GetWindowTextA
IsMenu
GetCursor
DrawTextA
AppendMenuW
IsWindow
CloseWindow
CopyRect
DrawIcon
CopyRect
GetFocus
AppendMenuW
IsWindow
EndDialog
GetWindowTextA
DrawTextA
DialogBoxParamA
BlockInput
GetMenu
AlignRects
GetDlgItem
BeginPaint
InsertMenuA
DrawIcon
CreateIcon
CopyImage
AppendMenuA
CopyRect
GetCursor
CopyImage
BlockInput
BeginPaint
AppendMenuW
CreateIcon
DrawTextA
DrawIcon
LoadMenuA
GetDlgItem
GetFocus
GetWindowTextA
CopyImage
LoadMenuA
InsertMenuA
DrawIcon
AppendMenuA
DrawIconEx
EndDialog
AppendMenuW
CopyRect
GetMenu
DialogBoxParamW
AlignRects
GetDlgItem
BlockInput
CloseWindow
CreateIcon
IsMenu
GetWindowTextA
GetDC
GetCursor
IsWindow
AppendMenuW
GetDlgItem
DrawTextA
GetDC
InsertMenuA
LoadCursorA
GetMenu
GetFocus
IsMenu
CalcMenuBar
AppendMenuA
DialogBoxParamW
LoadMenuA
kernel32
GetFileTime
CopyFileA
GlobalFree
GetLocalTime
DeleteFileW
OpenFileMappingA
WriteFile
FindClose
GetPriorityClass
FindAtomW
GetLastError
CopyFileExW
DeleteAtom
ExitProcess
ReadFile
FreeResource
GetStdHandle
ExitThread
AddAtomA
DeleteFileA
AddAtomW
CreateDirectoryA
FlushFileBuffers
GetCommandLineA
GetCommandLineA
DeleteFileW
ExitThread
OpenFile
CopyFileExA
GetLastError
CopyFileA
FreeResource
GetStdHandle
FindClose
GlobalFree
AddAtomW
ExitProcess
GetFileTime
GetLocalTime
CreateDirectoryA
DeleteFileA
ExitProcess
GetCPInfo
AddAtomW
OpenFileMappingA
FreeResource
GetFileType
ExitThread
DeleteFileW
FatalExit
DeleteAtom
GetPriorityClass
FatalExit
CopyFileA
GetFileType
ExitProcess
CopyFileExA
OpenFile
ExitThread
GetStdHandle
CreateDirectoryA
OpenFileMappingA
DeleteFileA
CopyFileExW
FlushFileBuffers
FindAtomA
WriteFile
AddAtomA
DeleteAtom
GetCommandLineA
ExitProcess
OpenFile
WriteFile
ExitThread
FindClose
GetCommandLineA
FlushFileBuffers
GetStdHandle
CopyFileA
DeleteFileA
FreeResource
GetLastError
GetPriorityClass
GetCPInfo
GetCommandLineA
ExitProcess
GetLastError
CopyFileExW
AddAtomW
CopyFileExA
DeleteFileA
FatalExit
ExitThread
DeleteAtom
FlushFileBuffers
DeleteFileW
WriteFile
FindClose
ReadFile
GetCommandLineA
GetLocalTime
GetFileType
GetCPInfo
GetFileTime
CopyFileExA
GlobalFree
FatalExit
GetLastError
ExitThread
ExitProcess
WriteFile
OpenFileMappingA
DeleteFileA
FindAtomW
FlushFileBuffers
CreateDirectoryA
OpenFileMappingA
GetFileTime
AddAtomW
ExitProcess
FindAtomA
CopyFileA
FindClose
OpenFile
WriteFile
CopyFileExW
FatalExit
AddAtomA
GetFileType
GetCommandLineA
GetStdHandle
CopyFileA
ReadFile
AddAtomA
CreateDirectoryA
GlobalFree
GetCPInfo
OpenFileMappingA
DeleteAtom
ExitProcess
GetLocalTime
FatalExit
DeleteFileW
FlushFileBuffers
advapi32
RegEnumKeyW
RegFlushKey
RegOpenKeyExA
RegLoadKeyA
RegQueryValueA
RegCreateKeyW
RegEnumValueW
RegGetKeySecurity
RegLoadKeyW
RegDeleteValueA
RegCreateKeyA
RegDeleteKeyA
RegDeleteValueW
RegOpenKeyW
RegEnumKeyExA
RegEnumKeyA
RegQueryInfoKeyA
RegCreateKeyExW
RegEnumKeyExW
RegCreateKeyW
RegQueryValueW
RegCreateKeyExW
RegQueryValueExW
RegEnumKeyA
RegQueryValueA
RegOpenKeyExA
RegOpenKeyA
RegLoadKeyA
RegOpenKeyW
RegDeleteValueA
RegCreateKeyExA
RegGetKeySecurity
RegEnumValueW
RegLoadKeyA
RegOpenKeyExW
RegOpenKeyW
RegCreateKeyA
RegEnumKeyA
RegEnumValueA
RegCreateKeyExA
RegOpenKeyA
RegQueryValueA
RegReplaceKeyA
RegQueryInfoKeyW
RegOpenKeyExA
RegEnumKeyExA
RegEnumKeyA
RegQueryInfoKeyA
RegDeleteKeyA
RegQueryInfoKeyW
RegQueryValueExW
RegOpenKeyA
RegFlushKey
RegCreateKeyExA
RegLoadKeyW
RegEnumKeyW
RegDeleteKeyW
RegEnumValueW
RegDeleteValueA
RegLoadKeyA
RegEnumValueA
RegReplaceKeyW
RegCreateKeyW
RegLoadKeyA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegEnumValueW
RegQueryValueExW
RegEnumKeyW
RegQueryValueExA
RegOpenKeyA
RegQueryValueW
RegCreateKeyA
RegCreateKeyW
RegGetKeySecurity
Sections
.chee0 Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.cd63c Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.244c Size: 108KB - Virtual size: 455KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.51706 Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.0hgc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ