Static task
static1
Behavioral task
behavioral1
Sample
05ea120339e5a74546d662d8f8a5e308.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
05ea120339e5a74546d662d8f8a5e308.exe
Resource
win10v2004-20231215-en
General
-
Target
05ea120339e5a74546d662d8f8a5e308
-
Size
20KB
-
MD5
05ea120339e5a74546d662d8f8a5e308
-
SHA1
94431f164edb234139d6d9d66e6e8828dc36b536
-
SHA256
4898cf827b0015f0bbaf57d34378ae4fb7aaf969b4f56811220e75c75f422de0
-
SHA512
e98e8124f7941a9603f29c17e4ca895f1fa275a1caa633e3cf24c06500bd2814e873ede83303a7357f77db5bf1dad4e9c995b2326fbcf68c109a08cc3c409e91
-
SSDEEP
384:4T8w7e2vDzTEzh1CKUJ/ADnYDwFYNa7J40UbN4r0wTMBrVijdYSCH:4gw7e2S1gJoTYDo2a7i3bN41ABrq6H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05ea120339e5a74546d662d8f8a5e308
Files
-
05ea120339e5a74546d662d8f8a5e308.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
kababa0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kababa1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kababa2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE