Static task
static1
Behavioral task
behavioral1
Sample
05b6c9a6bef7e84137981934f988c95b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
05b6c9a6bef7e84137981934f988c95b.exe
Resource
win10v2004-20231222-en
General
-
Target
05b6c9a6bef7e84137981934f988c95b
-
Size
101KB
-
MD5
05b6c9a6bef7e84137981934f988c95b
-
SHA1
5f75b2501d6772baad8e0601253409e2c2242df2
-
SHA256
1c638482bd8a733021ef678b72c8eeecfa9fc70dc9fdac83dd4379c45a020965
-
SHA512
fe4f71042bfd35f9e437db862113ba1fe5d279cb9c0bf0b8fd7ae8867bdf4780104992a9d1f37cda140df7a6f5aa9a1dafac78d21c105fccac79916d252deba7
-
SSDEEP
3072:Yl6qE6o2UpiyAlVqUvhJ5+BPYpLTXTD8/fx:rqAfyVqchJMELD8/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05b6c9a6bef7e84137981934f988c95b
Files
-
05b6c9a6bef7e84137981934f988c95b.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ