Static task
static1
Behavioral task
behavioral1
Sample
5c05bc1f7e49a87101884b1c89afbadb.exe
Resource
win7-20230220-en
General
-
Target
5c05bc1f7e49a87101884b1c89afbadb.zip
-
Size
1.6MB
-
MD5
f8f5f3b60cd7938e7c540279325e69b2
-
SHA1
203f05308256618322c9b3c1f92eb372e5208b79
-
SHA256
c19ff5ae9bfaa615c4fcc37abb100baeae3641aec85a75f65d78ebc502785c75
-
SHA512
a263281037b0db1215a7c0df31234c21bc66c5f4272b628b53e81ca31613559282df050df77f687bd3abce54ed2a137ca9ca8fc1fa2fcabb91134699ca119364
-
SSDEEP
12288:rxfFaJ6A3P3GnZwuDHLAawzNox0vMbn16O+/aiX0ZBI6RI:rxfF/Dn2aHMZOBp+pEZBI6q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/5c05bc1f7e49a87101884b1c89afbadb
Files
-
5c05bc1f7e49a87101884b1c89afbadb.zip.zip
-
5c05bc1f7e49a87101884b1c89afbadb.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 536KB - Virtual size: 535KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 147KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ