Static task
static1
Behavioral task
behavioral1
Sample
505b85f9ec13a6acd702bc19fd8e2115.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
505b85f9ec13a6acd702bc19fd8e2115.exe
Resource
win10v2004-20231215-en
General
-
Target
505b85f9ec13a6acd702bc19fd8e2115
-
Size
2.1MB
-
MD5
505b85f9ec13a6acd702bc19fd8e2115
-
SHA1
347aa9c5bfec34b0430d30e356149cee1007d228
-
SHA256
adc78ea409d4947dc9e69b45f3bee39f5bac08065d09d693f5ef7396028c6133
-
SHA512
431006527007b15910795bcde3f7e1838bcdb43665a68b3f563ba512c36fbfa45e177cc7fb941f5517e0fa6870c0d315db90b90ca7b013d7a79f1b4008188e78
-
SSDEEP
24576:EzMig4itQi3SwR1lLYezFf0bor7mOUyHw4LYK8i33V8m0cgnxWs:UMig4iRiwZLdzVPpQ4Lz8G3V8m0hxWs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 505b85f9ec13a6acd702bc19fd8e2115
Files
-
505b85f9ec13a6acd702bc19fd8e2115.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinXP Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE