Static task
static1
Behavioral task
behavioral1
Sample
05cc869a85dc855e83a6a91c7d9567fc8925be449139ede6dc1e42b4b1da1e6c.exe
Resource
win10v2004-20240412-en
General
-
Target
05cc869a85dc855e83a6a91c7d9567fc8925be449139ede6dc1e42b4b1da1e6c
-
Size
1.8MB
-
MD5
a8b651791beee3f535313712e0f4c422
-
SHA1
44d13220e89c30977556f393244822e6033ab7b1
-
SHA256
05cc869a85dc855e83a6a91c7d9567fc8925be449139ede6dc1e42b4b1da1e6c
-
SHA512
7c7f687f90c4e07f532f8929d13a4ce004fc9db549ab75128d1f5c9391cf95a5597cfb5237b199f559697c87f7c4f736208a0ca6aaf24dfea98080e6225c84b5
-
SSDEEP
24576:8HhgvDk0LhKb2M6Fk6s6tbQpfDPymnIwNgR/mP5RpUHDs9WINQawoA9FG:8Ogn2M6FHJwfTjsR/mPrGjkWINQ7F9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05cc869a85dc855e83a6a91c7d9567fc8925be449139ede6dc1e42b4b1da1e6c
Files
-
05cc869a85dc855e83a6a91c7d9567fc8925be449139ede6dc1e42b4b1da1e6c.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jjtqsqwl Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cmszitol Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE