Static task
static1
Behavioral task
behavioral1
Sample
05e5cbf3a6e9cce11a526f27c67a45ec474e0238501f0db56bb51b66280f75c5.exe
Resource
win10v2004-20240611-en
General
-
Target
05e5cbf3a6e9cce11a526f27c67a45ec474e0238501f0db56bb51b66280f75c5
-
Size
2.3MB
-
MD5
d0db3d33c1868fb105629ee3badb38c9
-
SHA1
4dad17472e1af064b0a5d9a451675c2cac89c71e
-
SHA256
05e5cbf3a6e9cce11a526f27c67a45ec474e0238501f0db56bb51b66280f75c5
-
SHA512
af37f2230c2c95e2694b74c969b752d9d744eb558cfbb53f73977616dce23923d8f7e1897be6005741445f689048a759495f34f75e42ef03a2e992291cc69582
-
SSDEEP
49152:PMM3Clk3y0KDxai2ylX3LdSLS5dfCpQpzhuBnQ7SwM87c/xRKYv8:PIk3yjHQO5dfUohP7SF87AxwY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05e5cbf3a6e9cce11a526f27c67a45ec474e0238501f0db56bb51b66280f75c5
Files
-
05e5cbf3a6e9cce11a526f27c67a45ec474e0238501f0db56bb51b66280f75c5.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 685KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
obqlfnzr Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yohyychm Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE