Static task
static1
Behavioral task
behavioral1
Sample
105f5e8b4dc7d4bd3c8a8f5e8494d1fb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
105f5e8b4dc7d4bd3c8a8f5e8494d1fb.exe
Resource
win10v2004-20231215-en
General
-
Target
105f5e8b4dc7d4bd3c8a8f5e8494d1fb
-
Size
77KB
-
MD5
105f5e8b4dc7d4bd3c8a8f5e8494d1fb
-
SHA1
fa8d78bf3ff60ab904f3b411b8015fa78aadf09f
-
SHA256
49b32c2b0fba19a1534a613aa00d73b7af2c725c983a5342b76b61cfcb1da626
-
SHA512
3f868109a101938b595466bae3092cb730255fc617f6280d9bb6e2115e23c729b85c0c4ec20f45210e41dcc76f6dde332921900c76e803c6cf7fe8bc5c4692b7
-
SSDEEP
1536:Nl+LN0koVnC40u2ZwXkdS16Rm/gBUJM+bTyf8GYSt6MgVluQhU:Nl+LN0koVeZokdw6RJp+ylEMgVkQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 105f5e8b4dc7d4bd3c8a8f5e8494d1fb
Files
-
105f5e8b4dc7d4bd3c8a8f5e8494d1fb.exe windows:4 windows x86 arch:x86
b5bfb5b265d57fccefefb45a7b002817
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetDIBits
GetKerningPairsA
GetArcDirection
GetFontData
user32
GetAltTabInfoA
GetDialogBaseUnits
GetMenuStringA
GetMenuItemID
kernel32
GetConsoleAliasesW
GetConsoleTitleW
FindAtomW
GetProcessVersion
LCMapStringW
HeapAlloc
Sections
.text Size: 48KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE