Static task
static1
Behavioral task
behavioral1
Sample
05f8f99a820917a21e826357e67ca6a6.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
05f8f99a820917a21e826357e67ca6a6.exe
Resource
win10v2004-20231215-en
General
-
Target
05f8f99a820917a21e826357e67ca6a6
-
Size
717KB
-
MD5
05f8f99a820917a21e826357e67ca6a6
-
SHA1
0d2b8a12e804a01d7cf66813d5be9e0a743a045f
-
SHA256
1a6b112e0acd231fef9152aa2ae5907301e04b870016dd99b41fbe54b2c21813
-
SHA512
c50524e7e0f92ac3a4ed52323b1500201d4f3a50d83ecfd9bbf1340528a3d49b47d11f8f4c90a9f688b40a5cfc774b8cade86d4d34a6bd4c6bb0aa5f0673d072
-
SSDEEP
12288:wzezFtNW69Qt6k2q9bogIB4DfCE6d3F3Z4mxxU9go6nL5RwgqkJAVdJ:wwbFu+Yozu7CLBQmX9o6tRlqkWH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05f8f99a820917a21e826357e67ca6a6
Files
-
05f8f99a820917a21e826357e67ca6a6.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 401KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE