Static task
static1
Behavioral task
behavioral1
Sample
05739e4f4068ea3f4a64c04e8f40fcd5.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
05739e4f4068ea3f4a64c04e8f40fcd5.exe
Resource
win10v2004-20231023-en
General
-
Target
05739e4f4068ea3f4a64c04e8f40fcd5.bin
-
Size
786KB
-
MD5
05739e4f4068ea3f4a64c04e8f40fcd5
-
SHA1
8e20a59cb55ff78441e5bb6d969e5d0d1ef64123
-
SHA256
ac2e5508df9dc7ccefe03af60e395757908aa87ce28b96366dccd88965cd55c0
-
SHA512
9c4e881139b79831a4ec3299067230f8a77cde29ef957b62ca9bc1e81320d61545a1b07b7e57e0b706000fa68878568f5719a938b30d0186c8f8e757cab166e2
-
SSDEEP
12288:RIP+FrwR2k0rM2iNkuPF337gn5RqU6kdS325Xy8ZeLMZy38JUcBvlCADxCUN6/xt:c1l5LgvqUxAGU8A2JTCAAxAcRs0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05739e4f4068ea3f4a64c04e8f40fcd5.bin
Files
-
05739e4f4068ea3f4a64c04e8f40fcd5.bin.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 717KB - Virtual size: 716KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ