Static task
static1
Behavioral task
behavioral1
Sample
05dee7ef72bb0c3aaef863cfd3fc34dc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
05dee7ef72bb0c3aaef863cfd3fc34dc.exe
Resource
win10v2004-20231215-en
General
-
Target
05dee7ef72bb0c3aaef863cfd3fc34dc
-
Size
24KB
-
MD5
05dee7ef72bb0c3aaef863cfd3fc34dc
-
SHA1
1c0b2b3b60e43d65606a9d6fa24e65dbaa15e7b6
-
SHA256
dba683736ebb0ad6696f7b0a4be0bf9855b5f78db99a1a3f33b622a8d7d8ece5
-
SHA512
4951d5ee2e0094aa561760c4c47d311ee7d97d11469b14a5c949b1556ffb1c7b20e45f4b3c5fa73efe945909c7b01356d3b3d2fc3c42123bd4c38adbcb072301
-
SSDEEP
384:ESbBrwvmuI73i5ktsuqLPWmzSkscWs2PFEZUDCB3SqBtfTQ3K:EuB/7y5FPWmzhSskOsm3SqBRT5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05dee7ef72bb0c3aaef863cfd3fc34dc
Files
-
05dee7ef72bb0c3aaef863cfd3fc34dc.exe windows:5 windows x86 arch:x86
ba25783c8afff2d38604e5abba1854dc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt20
??5istream@@QAEAAV0@AAN@Z
_memccpy
_ismbstrail
??4strstream@@QAEAAV0@AAV0@@Z
_adj_fdivr_m64
_CItanh
??5istream@@QAEAAV0@PAVstreambuf@@@Z
?ends@@YAAAVostream@@AAV1@@Z
?bad@ios@@QBEHXZ
_fileno
??6ostream@@QAEAAV0@P6AAAVios@@AAV1@@Z@Z
floor
?open@ofstream@@QAEXPBDHH@Z
_findfirst
_tolower
??0strstreambuf@@QAE@XZ
_wutime
opengl32
glClear
glTexCoord1fv
glNormal3fv
glIndexdv
glPopAttrib
glColorMaterial
glTexCoord3f
glTexParameteri
glReadPixels
glNormalPointer
glRasterPos3i
glRotatef
glTexEnviv
glLineWidth
glScaled
glMap1d
glLighti
setupapi
SetupUninstallOEMInfA
CM_Get_HW_Prof_Flags_ExA
SetupQueryFileLogA
SetupDiGetHwProfileFriendlyNameExA
SetupDiCreateDeviceInfoListExW
SetupLogErrorW
SetupDiClassGuidsFromNameExW
CM_Invert_Range_List
CM_Disconnect_Machine
SetupOpenAppendInfFileW
CM_Get_Class_NameW
CM_Query_Remove_SubTree_Ex
CM_Get_Device_Interface_Alias_ExA
SetupInstallFileA
CM_Run_Detection
SetupDiOpenDeviceInterfaceRegKey
winmm
mid32Message
waveOutGetDevCapsW
GetDriverModuleHandle
midiInGetID
WOWAppExit
mciFreeCommandResource
joySetThreshold
midiOutMessage
waveOutGetPosition
waveInGetErrorTextW
waveOutMessage
waveInPrepareHeader
mmioSetBuffer
timeKillEvent
mmTaskCreate
mixerSetControlDetails
sndPlaySoundA
msvcp60
?_Getctype@_Locinfo@std@@QBE?AU_Ctypevec@@XZ
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHIIPBG@Z
?_Term@?$ctype@D@std@@KAXXZ
?_Xran@std@@YAXXZ
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIABV12@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
?epsilon@?$numeric_limits@N@std@@SANXZ
_LDtest
??_F?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
?id@?$numpunct@G@std@@2V0locale@2@A
?round_error@?$numeric_limits@D@std@@SADXZ
??Pstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??_F?$complex@M@std@@QAEXXZ
kernel32
WTSGetActiveConsoleSessionId
RegisterConsoleOS2
VirtualAlloc
SetThreadLocale
QueryDosDeviceW
GetTickCount
GetPrivateProfileStringA
CreateTimerQueue
GetConsoleTitleW
GetCurrentThreadId
HeapCompact
GetCommConfig
GetCurrentProcessId
BackupRead
UnhandledExceptionFilter
GetDriveTypeA
QueryPerformanceCounter
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 649B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ