Static task
static1
Behavioral task
behavioral1
Sample
05d0f40bb6f10bfa37a792b2a76c03e6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
05d0f40bb6f10bfa37a792b2a76c03e6.exe
Resource
win10v2004-20231215-en
General
-
Target
05d0f40bb6f10bfa37a792b2a76c03e6
-
Size
33KB
-
MD5
05d0f40bb6f10bfa37a792b2a76c03e6
-
SHA1
ff1ed5a02f1aa17cf4a3403bc030ea5bfccd834d
-
SHA256
949b340d18147bbf7f432e11cce57c448f682df6b67c7a9fb6418ea7beeefa85
-
SHA512
f75624b60756d60a2ce89b9d32684cd2b6d73567ff3e2f0295622f5c6a9f77cb1effbe8872d1bf8f4140df6ed2fdd327a2df2c1c1fa47ec61a79ef1574fca0c1
-
SSDEEP
384:7OsATTUfzfqLJMcFyz1HD5adpODIu0nv765AL+rcihg8cul9SktBOtIl/O9Rxhvj:79f0QBHDDR4L+r/hg8VlVh/QxhvbL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05d0f40bb6f10bfa37a792b2a76c03e6
Files
-
05d0f40bb6f10bfa37a792b2a76c03e6.exe windows:4 windows x86 arch:x86
9d2372d107fa26083e21f33ddd0574dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
urlmon
URLDownloadToCacheFileA
user32
ShowWindow
advapi32
RegConnectRegistryA
shell32
Shell_NotifyIconA
msvcrt
_chdir
wininet
InternetReadFile
msvcp60
?_Xran@std@@YAXXZ
ole32
CoUninitialize
oleaut32
SysAllocString
version
GetFileVersionInfoA
gdi32
GetDeviceCaps
Sections
.text Size: 28KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE