Static task
static1
Behavioral task
behavioral1
Sample
25a6a77d2c8737a66757e262a26aa08e0811b951b18f41676c6460c0d3602143.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
25a6a77d2c8737a66757e262a26aa08e0811b951b18f41676c6460c0d3602143.exe
Resource
win10v2004-20230220-en
General
-
Target
25a6a77d2c8737a66757e262a26aa08e0811b951b18f41676c6460c0d3602143
-
Size
619KB
-
MD5
29fd0055024d5a78f4189503c45bbf30
-
SHA1
cceee8bfb8aba7ba51e4f60bd3232364588ed146
-
SHA256
25a6a77d2c8737a66757e262a26aa08e0811b951b18f41676c6460c0d3602143
-
SHA512
ac8f06c04c6480e17bf950c7be24c306032b817870c369d18062c72f17ad246bde38d3c53ed3cbd002249dbedeb24fa0ee90ce92c90a1648d9f3e8c6c6e6019e
-
SSDEEP
6144:aINJ4JM+V75GxlEMZ74cZqC5V202gFzIZqURQsavOkroEgUIxsrDsyLHBhHztRlb:xAdIWgFc9Qsa7VgUbJVRl22sCK0gnvI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25a6a77d2c8737a66757e262a26aa08e0811b951b18f41676c6460c0d3602143
Files
-
25a6a77d2c8737a66757e262a26aa08e0811b951b18f41676c6460c0d3602143.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 616KB - Virtual size: 616KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ