Static task
static1
Behavioral task
behavioral1
Sample
05240599.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
05240599.exe
Resource
win10v2004-20230220-en
General
-
Target
05240599.exe
-
Size
1.5MB
-
MD5
efa53d48a12ae904fbe8b8d1cb5c6bfd
-
SHA1
4091b9bc4a764ff228b1efe160b1cca5fe8d9095
-
SHA256
d42a484bf737e8207f34da4c145571f8cc387e941f85d5b9c5fd07b51094bc59
-
SHA512
0facf9d03a33690cdb5cff7340123b6dbe09ddda40c35dc969c0c327934de6aa29e59d22000ec9de7f5977f3ea69523f2cacd72bce13e01f767f65f7c0f4f881
-
SSDEEP
24576:zFROyqGUL8sjKvG43MHsNkaNGgwgpqrGrFrHykecOI34vDnhQ/hbHEm3QN0zaR5t:TNqGo8/vzMARGgwgpqrGr5y7nI3KDnae
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05240599.exe
Files
-
05240599.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ