Static task
static1
Behavioral task
behavioral1
Sample
05eb5481d2de956ea0cfb05a3b28c5ec.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
05eb5481d2de956ea0cfb05a3b28c5ec.exe
Resource
win10v2004-20231215-en
General
-
Target
05eb5481d2de956ea0cfb05a3b28c5ec
-
Size
330KB
-
MD5
05eb5481d2de956ea0cfb05a3b28c5ec
-
SHA1
73f6110d7f7f49044d701c878d7ee99c0ba9f329
-
SHA256
21f03906a8bf3a509cdd73c6813e7957c4393f8a7cfec26b76a46cba9453222e
-
SHA512
05d6f6d42e47bea241a76f78f5397966d34ccd90c941af1dfad9feefd1eb6bcd6c8ab2081d287b58ab7f0cd1823e3bb845accfc9ec3bd1c65f4be6170806e866
-
SSDEEP
6144:fIAa+OZPrKDjk8iKwsUEKY+PqwKup/RWUE+aVDWjDULMxO:LXHVBwnEKYCLUUvadWjDUIxO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05eb5481d2de956ea0cfb05a3b28c5ec
Files
-
05eb5481d2de956ea0cfb05a3b28c5ec.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gda Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE