Static task
static1
Behavioral task
behavioral1
Sample
c05868938d767b4d90c3d07a0e7c467a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c05868938d767b4d90c3d07a0e7c467a.exe
Resource
win10v2004-20240226-en
General
-
Target
c05868938d767b4d90c3d07a0e7c467a
-
Size
88KB
-
MD5
c05868938d767b4d90c3d07a0e7c467a
-
SHA1
d676de8c270a0a9607241c486b39acefab24f7a8
-
SHA256
fad765fe4530a4036694ccb424eac36a612c905d8d078f747bf38be24bfdfd68
-
SHA512
389fd10a9d302d8495a8f809e7ef28e1a86f84e2baf6e5055b1c5231c02182f0fde6c89a953594bfe31646f51eba6312d83d9333ebef1eb5d973f2090ad22e26
-
SSDEEP
1536:lzqRIQzP85v7/jc5+E3qqA3ncQrwYUI9Auk7spU4xEYIR4V8Pw+Vl9:mIaP8J++2qq4nlwYUIOuk7sNxVIuWbL9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c05868938d767b4d90c3d07a0e7c467a
Files
-
c05868938d767b4d90c3d07a0e7c467a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ