Static task
static1
Behavioral task
behavioral1
Sample
05b0217261909d44a001d4b283c51df2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
05b0217261909d44a001d4b283c51df2.exe
Resource
win10v2004-20231215-en
General
-
Target
05b0217261909d44a001d4b283c51df2
-
Size
1.0MB
-
MD5
05b0217261909d44a001d4b283c51df2
-
SHA1
c4cb95b26376cc67a38b035183bc775724ba4b95
-
SHA256
b9c2bcb74d67c683f66168aa484eefc55b488aa4015c4e38d1e4a131c0220699
-
SHA512
5b9670289444aa035b1254030b09a3bccbaaf6e27e24164cdeb1519d34d63aedc79b2f255d82d7f62e76d637914c0ba86e3c8a65958788df8778e6cf1c73603b
-
SSDEEP
24576:z/C8FE+7CDfGJIpclxPoH/KpcCkVxpI7h8CQ36ZcT:qkCDVGgSpcCgxAu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05b0217261909d44a001d4b283c51df2
Files
-
05b0217261909d44a001d4b283c51df2.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 431KB - Virtual size: 430KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tzt2 Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text2 Size: 512B - Virtual size: 289B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 447KB - Virtual size: 446KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 150KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dataz Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ