Static task
static1
Behavioral task
behavioral1
Sample
05ba9080ab35f09bfc2ec8e9a9a0e0af1f6358f89d0490b9e517b4fb514192f8.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
05ba9080ab35f09bfc2ec8e9a9a0e0af1f6358f89d0490b9e517b4fb514192f8.exe
Resource
win10-20240611-en
General
-
Target
05ba9080ab35f09bfc2ec8e9a9a0e0af1f6358f89d0490b9e517b4fb514192f8
-
Size
1.9MB
-
MD5
dc73adc923485c80cb9bfa857a1323b7
-
SHA1
cac875d0363a0b66eddaa89db7d9ab3d46d150d3
-
SHA256
05ba9080ab35f09bfc2ec8e9a9a0e0af1f6358f89d0490b9e517b4fb514192f8
-
SHA512
5d1f0db6513f1a4287673e1eecd4f91226e266e84afefb9c395042f71dd8ffee387ea1b0afb11a9a5a2012b0c5a769195e07de9fbf37e067f643c865b8eff25a
-
SSDEEP
49152:hJecRQfnax2eQuSOI+TRVxyX92ggKnvWGtD0iBlfO/Dk:hJ/2OEZ+tuXVJvZ5O/Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05ba9080ab35f09bfc2ec8e9a9a0e0af1f6358f89d0490b9e517b4fb514192f8
Files
-
05ba9080ab35f09bfc2ec8e9a9a0e0af1f6358f89d0490b9e517b4fb514192f8.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 182KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pbzqcljm Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mgfpbslw Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE