Static task
static1
Behavioral task
behavioral1
Sample
085f7419291f22dc9a0ba0f1f705d6d5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
085f7419291f22dc9a0ba0f1f705d6d5.exe
Resource
win10v2004-20231215-en
General
-
Target
085f7419291f22dc9a0ba0f1f705d6d5
-
Size
12KB
-
MD5
085f7419291f22dc9a0ba0f1f705d6d5
-
SHA1
7efd5b6ca575f271e797274b791960e3e2a19fb5
-
SHA256
4dedb8f618b3e88c280f3df0b6f4a31389a212b950cdd47fd64e6eb2bf80472c
-
SHA512
9962ef721d6123a598f16b0c3bfe4f5d5457f08b74d69a7faf597cf754338966268b6706d3621414ab5d44692db82e346309e961562d0a99d1d1e42852adc9c0
-
SSDEEP
192:l68rQKeWf55O8jSo5r8rtA4MbGUCYeq/i9ftuKO8Er/kLK:l6YeWftSDOGU4vW9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 085f7419291f22dc9a0ba0f1f705d6d5
Files
-
085f7419291f22dc9a0ba0f1f705d6d5.exe windows:4 windows x86 arch:x86
9951ea482cdf88d83ed64c8866836e90
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
ExitProcess
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ