Static task
static1
Behavioral task
behavioral1
Sample
05e9515c59c1d8d11a7d264703bbbd5b11936c9dd2fb7cd95a3b1d85e15d0049.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
05e9515c59c1d8d11a7d264703bbbd5b11936c9dd2fb7cd95a3b1d85e15d0049.exe
Resource
win10v2004-20240226-en
General
-
Target
05e9515c59c1d8d11a7d264703bbbd5b11936c9dd2fb7cd95a3b1d85e15d0049
-
Size
670KB
-
MD5
481dcb9c20f8b3430a2dbddbafa8a59c
-
SHA1
6f7e82cd97babd198e13680c9f05252b5c8e2d66
-
SHA256
05e9515c59c1d8d11a7d264703bbbd5b11936c9dd2fb7cd95a3b1d85e15d0049
-
SHA512
5541ab71a67f24b454617da5ec29131a8c34039f15382d21af6ea82a735ebd75e7cc6cb6f6e64af8cfd8379721fb5bb4dae18b561f0340eeb321dc1e739d5485
-
SSDEEP
12288:0Kc6V/xez3YXIO7H6DE9rsskQPc7LFm4fBTZTa/9joh8WW349:gz3VcH1L0F3TZt8Wu4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05e9515c59c1d8d11a7d264703bbbd5b11936c9dd2fb7cd95a3b1d85e15d0049
Files
-
05e9515c59c1d8d11a7d264703bbbd5b11936c9dd2fb7cd95a3b1d85e15d0049.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 660KB - Virtual size: 659KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ