Static task
static1
Behavioral task
behavioral1
Sample
05c30daba17211b85a8ea0c9c4f08ba62645d62bde3df0852709be2bb82c4c68.exe
Resource
win7-20240708-en
General
-
Target
05c30daba17211b85a8ea0c9c4f08ba62645d62bde3df0852709be2bb82c4c68.exe
-
Size
72KB
-
MD5
8091c892cd2045a5fa4c85ccf229ba34
-
SHA1
b907ff0750d28a568348c693b295a3a01ef7043e
-
SHA256
05c30daba17211b85a8ea0c9c4f08ba62645d62bde3df0852709be2bb82c4c68
-
SHA512
90d2bf96265ceaaa5381fddf247457980837b972972c7cd46fb3414f02ab764e4608887f83978331369f10fa0bad7b0112a3250ad853de3a746a9c4c5c08cb53
-
SSDEEP
768:Qdwz0k23YXEL5kYcDjf19W6q0GEiMywPoTVIgsQGPL4vzZq2o9W7GsxBbPru:7e6HfDWs3oTVPvGCq2iW7za
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05c30daba17211b85a8ea0c9c4f08ba62645d62bde3df0852709be2bb82c4c68.exe
Files
-
05c30daba17211b85a8ea0c9c4f08ba62645d62bde3df0852709be2bb82c4c68.exe.exe windows:4 windows x86 arch:x86
656deb84a53f84d83590234753a39fcd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteProfileStringA
GetSystemDirectoryA
GetShortPathNameA
CopyFileA
GetProfileStringA
GetModuleFileNameA
GetFileType
GetStdHandle
CloseHandle
FlushFileBuffers
GetStringTypeW
GetStringTypeA
GetLastError
GetFileAttributesA
GetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
UnhandledExceptionFilter
WritePrivateProfileStringA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
LCMapStringA
LCMapStringW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
user32
DialogBoxParamA
EndDialog
SendDlgItemMessageA
advapi32
RegSetValueExA
RegQueryInfoKeyA
RegCloseKey
RegCreateKeyExA
shell32
ShellExecuteA
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
÷�u� Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE