Static task
static1
Behavioral task
behavioral1
Sample
05d0eea49c4eec7db53ac76f41995b63.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
05d0eea49c4eec7db53ac76f41995b63.exe
Resource
win10v2004-20231215-en
General
-
Target
05d0eea49c4eec7db53ac76f41995b63
-
Size
642KB
-
MD5
05d0eea49c4eec7db53ac76f41995b63
-
SHA1
5077fcded39d30f4f184fc0ceb50439a723eb01c
-
SHA256
dbbea056ef3bb6c200e2aa37a3fc1385eb734b58b25541af8ae8e5230b5eb950
-
SHA512
766bdf1192cd65bcc29e294298a2b64b051e5d0ec8a17750492b1a7f1c159e778f3d94b60b248969117c6939157b6d9fa34dac7e85fa4b64ac8835e7b0a3a6be
-
SSDEEP
12288:jBfPUJFneSNvle9jtj0M0m5xlJuJkx1xxoSltDHG3vl9hIJXTfyRCmJWe5Etl56B:leF1Nitjvnxl/1UjIjKGUEtRY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05d0eea49c4eec7db53ac76f41995b63
Files
-
05d0eea49c4eec7db53ac76f41995b63.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 220KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE