Static task
static1
Behavioral task
behavioral1
Sample
05d86f554b4516db22eb74a1634d83e7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
05d86f554b4516db22eb74a1634d83e7.exe
Resource
win10v2004-20231215-en
General
-
Target
05d86f554b4516db22eb74a1634d83e7
-
Size
379KB
-
MD5
05d86f554b4516db22eb74a1634d83e7
-
SHA1
afdf0b24fbae444e0db9f26566a4216db3808db6
-
SHA256
e64c7128aa6d7c278df4bda14caad2a5eba1337c52c3f6b32c70666ae3dbf832
-
SHA512
d170aa0c558961ba3a363cede0080391d266022fe8cec15664b230e87616b3543e103f1e639cb659d7c6774a93bef0e14d2acdd1bbfe2495939ebe53d01dc879
-
SSDEEP
6144:9z3n/WEapavXtkUv8jcl0vjleoLIeBD9sv8BwI5D7yc2p6TFcLyE7UuMvMb3bdov:lWfetkUvAcyrln0e7HwI17ytXLy+UuiT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05d86f554b4516db22eb74a1634d83e7
Files
-
05d86f554b4516db22eb74a1634d83e7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 378KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE