Static task
static1
General
-
Target
resoa.exe
-
Size
1.2MB
-
MD5
be55622d2c0ae5dba612a8e101dc4922
-
SHA1
5eecc4769340c73e1b0d7b6df86dc5aa4f09cd1b
-
SHA256
16df4e34eeb7b09c4533215c2d2cb9e221c33182e50046cea7fdbd139cfe56a1
-
SHA512
4ff91eada540fcb8a11232070bf0258d3d5bf485957306426c98a4be75b93075e5a0226f49c528ba9c3826e0418df63339df2053c92910e0f6ebff12fc5951c8
-
SSDEEP
24576:XS/Q08sGeiiGCCOTcBnluSLBVcK3u7Oc5WVowZ730stFhJ4ttEv1k3hFCCaQT:C/U/eiiGCCOWuSHLo27bhWttEvm3XCe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource resoa.exe
Files
-
resoa.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 107KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 174KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 914KB - Virtual size: 916KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE