Static task
static1
Behavioral task
behavioral1
Sample
05b29313308ee10df4acc3802987a35d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
05b29313308ee10df4acc3802987a35d.exe
Resource
win10v2004-20231215-en
General
-
Target
05b29313308ee10df4acc3802987a35d
-
Size
400KB
-
MD5
05b29313308ee10df4acc3802987a35d
-
SHA1
7bb7e25df648cd5bb943bad603375e1fbd2582a1
-
SHA256
2423008ff2f39e28a07370ab5277c60c1838b911f83f16821a1e1c55bcc18eb5
-
SHA512
051c6bd63fb8a618a13f2e82a7cb9c53edbf4e180786381251186f81ed19c14d03371e2bdece087ba97ef15fff2abb6a52808f440c0780e8ebeab4323f591dbb
-
SSDEEP
3072:USHWiNo/ftfQKAc94/3bXZ3Nk6Rk3mQsTEX8TKzRZ00jE2Ej5BdVd2Hayox1aMr4:UZfec9EbXDk6RkdKAE2EJuHOLE2EN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05b29313308ee10df4acc3802987a35d
Files
-
05b29313308ee10df4acc3802987a35d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ