Static task
static1
Behavioral task
behavioral1
Sample
14a25a9266c56c81bb04957e7d0f3ad8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
14a25a9266c56c81bb04957e7d0f3ad8.exe
Resource
win10v2004-20231215-en
General
-
Target
14a25a9266c56c81bb04957e7d0f3ad8
-
Size
130KB
-
MD5
14a25a9266c56c81bb04957e7d0f3ad8
-
SHA1
6ce50fb301df4a633d28e0afcd27ebb68c1b1fe0
-
SHA256
cfe8f5bd3026292fbf6af76702e3f6d129f17018f2c24ab2e35308100361da60
-
SHA512
08f94431982088539d9e66b02ba322ca1c78c3f72ec842344d513ef6b23575009d66e9d277a6f167f1bddd75b404832a12a09405d91f0326af953c522125c9ea
-
SSDEEP
3072:xKak9PLZyP/JPgeB4bNp8eS57Fik6OdZqO2sTLGQ6U:Ma4ZynJTB4h657F76xCXGQL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14a25a9266c56c81bb04957e7d0f3ad8
Files
-
14a25a9266c56c81bb04957e7d0f3ad8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 127KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE