Static task
static1
Behavioral task
behavioral1
Sample
05c48ef0b12cf6c2094dd541d689cf1c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
05c48ef0b12cf6c2094dd541d689cf1c.exe
Resource
win10v2004-20231222-en
General
-
Target
05c48ef0b12cf6c2094dd541d689cf1c
-
Size
8.0MB
-
MD5
05c48ef0b12cf6c2094dd541d689cf1c
-
SHA1
92914d94a741bb3513c92188e173d11929c07492
-
SHA256
9354f134aabda8c546e2293e4e778ef6ae753a09e835dbd31d2efe132a7fd1fe
-
SHA512
224ada771043803ee9cd54ebd7a3749eb5269b0aefeb92fd32b6a874fd7e6fe64516797fe32bac44f8e32763c65effafce3cde42d9facc44c2ed09edbf702fba
-
SSDEEP
12288:O3zRKjzDMOiPt+0metiZKBHgg7qR9Akvt0RQ3KbXOen8lNNm2UJx78:OjRKn4Ht+0mNKBx+7HAXOe8lzm2UJp8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05c48ef0b12cf6c2094dd541d689cf1c
Files
-
05c48ef0b12cf6c2094dd541d689cf1c.exe windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 41KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
spunykhb Size: 487KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dxkimitv Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE