Static task
static1
Behavioral task
behavioral1
Sample
05094bd472d615352be924af72149920.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
05094bd472d615352be924af72149920.exe
Resource
win10v2004-20231222-en
General
-
Target
05094bd472d615352be924af72149920
-
Size
53KB
-
MD5
05094bd472d615352be924af72149920
-
SHA1
248ebb32df3a245da1fe294a44b7fcda6cd9f47d
-
SHA256
5ec4d813fbb96a675ef6334c9ff2b4c53fc253f40df15a280930b1c2beb401be
-
SHA512
8bb04c5d6e1f8220c67dcb587dfb11e26deb7add2dfcb9a119964f430ca33c91b1c53bc88b6a4be9145175ade1520f45fc2e2e4afefe311dae13aa68dc9c8a09
-
SSDEEP
1536:uy2cFSVgui4+Avqze1c6y5wr4WQRg4aJW5Is:z2cnuPzSa1ct5qBQW4aJW5Is
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05094bd472d615352be924af72149920
Files
-
05094bd472d615352be924af72149920.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE