Static task
static1
Behavioral task
behavioral1
Sample
PI-EP 05919.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
PI-EP 05919.exe
Resource
win10v2004-20230703-en
General
-
Target
PI-EP 05919.zip
-
Size
507KB
-
MD5
a30f255d2d8f3b25d33d4f670843e901
-
SHA1
5bf558a9388604e7a2efc619d52f8219596322d2
-
SHA256
faf6943211190f86e38fad307c55717e2502871e459a7b2ebbab03a577601885
-
SHA512
1c3d5fcd256b9f2d9b07cd17849be653dda4593330b310a359bf13a0d2cefd06016ffe4bf56b4c9a55ecca8418a65ff633fcc69add6b98cd10e965e6c4fe8509
-
SSDEEP
12288:ScU2gxvS2P3i3ua/Hjd+775PtoNAOnKM0YrA5Cv8vn8:ScUXZS2PGboHfoNADYVvg8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PI-EP 05919.exe
Files
-
PI-EP 05919.zip.zip
-
PI-EP 05919.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 557KB - Virtual size: 556KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ