Static task
static1
Behavioral task
behavioral1
Sample
05de9d6e9d88b4dc15d593e310e25252.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
05de9d6e9d88b4dc15d593e310e25252.exe
Resource
win10v2004-20231215-en
General
-
Target
05de9d6e9d88b4dc15d593e310e25252
-
Size
51KB
-
MD5
05de9d6e9d88b4dc15d593e310e25252
-
SHA1
158f7c730b96919d1a7960aab589e70779d93258
-
SHA256
e93fa61149dbcbab826ff90579cff84ae80548c7c7888c18e9401afc510069dc
-
SHA512
c721c3ab76b786def33ea1dd6a04e2884d455f2414b749645234f29e8f2763916f2b5f7ab816c1feb7755a793eb53722f345707f8c3744a5dcb1007301e444f6
-
SSDEEP
768:KXtNSDOhiTdlm4fZAaRWZNir08J+UgeCx5dqaziPsbfJDH4C:wtNSDOhWdlJfZQZNCJLgeYqaGE75H7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05de9d6e9d88b4dc15d593e310e25252
Files
-
05de9d6e9d88b4dc15d593e310e25252.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
����t Size: 46KB - Virtual size: 576KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE