Static task
static1
Behavioral task
behavioral1
Sample
05f63376e8abebdaad1861573d5063ac.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
05f63376e8abebdaad1861573d5063ac.exe
Resource
win10v2004-20231222-en
General
-
Target
05f63376e8abebdaad1861573d5063ac
-
Size
5KB
-
MD5
05f63376e8abebdaad1861573d5063ac
-
SHA1
beac1aba2408c79b66a0ec30d91815b0af77becd
-
SHA256
bb13c8bef59aab3bde1dd1eb2f845b96e83a4ec8fa5da8e79aea1120934e36b7
-
SHA512
0ce6491265d9a92631d0d371e8e4b62fe1e1fe76e4f2138c611c5db91c8f60784e4cfcd41f8da2283be693af06fb4a15213793e30692d05dabbb8b5e7c8ad9a5
-
SSDEEP
48:6SfgI4nL5OOk0OEs9edoEeO7hNNMk+Vgp8edi6ucm+qUiUiYhCYw9y7rlL5RLF2Y:FJ8Jk9F1EeY+V8Vduc9rTp5gzNt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05f63376e8abebdaad1861573d5063ac
Files
-
05f63376e8abebdaad1861573d5063ac.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ