Static task
static1
Behavioral task
behavioral1
Sample
05118599.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
05118599.exe
Resource
win10v2004-20230220-en
General
-
Target
05118599.exe
-
Size
3.8MB
-
MD5
f9f8c06338941342ca6171fbd7b0f418
-
SHA1
5e0115c4e079da2dd2c2ba3313ede4bd2fd9aa87
-
SHA256
a92e5d75ad4b92ef75d516f16ac09d3b2c171ed3c75f137290640db1d3d76162
-
SHA512
05900ea53380771efd4888ae188b721a43dc76f53a1fb5908762b5cd0342f1d3d216a2fdba0d75d0f5118168a7b42704cd17bd57b58c147b18dc437c1f06f280
-
SSDEEP
49152:4I1mAs77KUizz6MDQiKstlmo+O1O3OiH9hluE1iTKVP4:
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05118599.exe
Files
-
05118599.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ