Static task
static1
Behavioral task
behavioral1
Sample
05a0edfd781368d1b62b066b5aadb278.exe
Resource
win7-20231215-en
General
-
Target
05a0edfd781368d1b62b066b5aadb278
-
Size
967KB
-
MD5
05a0edfd781368d1b62b066b5aadb278
-
SHA1
cfd9740076f345776543d874d0705571618601c0
-
SHA256
bae8e6518524a6945339b3a0901e9ad43c03441000b239d777bf60e58eed6324
-
SHA512
5e2152bdbac47a23cc3d6c524a3c1fd897c51a28a5c17986af8b6679570c8a7b4f38b374836464f72eda59f8bbef873c46bed51bd21b77d974b0cc1f6c8b8610
-
SSDEEP
12288:EN+rQEDaNyW91w1P+fRyEOzM8KX8MYD7uwgGEtZ182+j4h:dr5DaNyW91wd+fRvOzpKzSywO182Vh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 05a0edfd781368d1b62b066b5aadb278
Files
-
05a0edfd781368d1b62b066b5aadb278.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 936KB - Virtual size: 936KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ