Static task
static1
Behavioral task
behavioral1
Sample
05cf39403a2f9050e379f92529eb063e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
05cf39403a2f9050e379f92529eb063e.exe
Resource
win10v2004-20231222-en
General
-
Target
05cf39403a2f9050e379f92529eb063e
-
Size
243KB
-
MD5
05cf39403a2f9050e379f92529eb063e
-
SHA1
007f6d54240d4462aab271fe4a666c7e6ec30dee
-
SHA256
57d5776c1978d2840206ae8b013e2506aa0be2e55ca3d8a2bf509bbb110ccdb5
-
SHA512
a1fe4a27f30aade5d9b18fb2d059a47a409f97f4a410d39f4830b01412aee48404e3d58b3ddd4551a95127ce307e2ac6da6e636b52671f7f7476bd741bf73379
-
SSDEEP
6144:H9hpbNeat5+vX9cY1owJ4MenzYA+VZ1/Bj+c:9bcaCcKoC4Mk0Z1t+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05cf39403a2f9050e379f92529eb063e
Files
-
05cf39403a2f9050e379f92529eb063e.exe windows:4 windows x86 arch:x86
ec934202e245ba4cf52230be0c435cbf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
wsprintfA
advapi32
RegCloseKey
ole32
OleRun
oleaut32
VariantChangeTypeEx
Sections
Size: 236KB - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE