Static task
static1
Behavioral task
behavioral1
Sample
05fd24e6c4204b4a9ea67f5be30c66c9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
05fd24e6c4204b4a9ea67f5be30c66c9.exe
Resource
win10v2004-20231215-en
General
-
Target
05fd24e6c4204b4a9ea67f5be30c66c9
-
Size
611KB
-
MD5
05fd24e6c4204b4a9ea67f5be30c66c9
-
SHA1
d97fb0f1003b8bda3795791ac1b08dde9add8a78
-
SHA256
ca8514d0320a8281174dbe5404dc7ac89ef009ad0b32fa96110b79e10e5350d2
-
SHA512
cf34cf285f4d3fb5cbfdaeebdf00730f4a2490f6a5cc42bed28ed27b8a2e0ed3516ee6de286866f478bef500e16bfddbc58fce2c8c3eca4615050827262780b1
-
SSDEEP
12288:P6F49xNtJSYayXohtc2zEXIxYeEyw5wsDC7LjJRtJIU9B3iwlHf9Dc1:FD6yYNYeE7SsDCLJRPI6Bd/9c1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05fd24e6c4204b4a9ea67f5be30c66c9
Files
-
05fd24e6c4204b4a9ea67f5be30c66c9.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE