Static task
static1
Behavioral task
behavioral1
Sample
125d91fe9cbee705ae73c4d936ea7ef5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
125d91fe9cbee705ae73c4d936ea7ef5.exe
Resource
win10v2004-20231215-en
General
-
Target
125d91fe9cbee705ae73c4d936ea7ef5
-
Size
76KB
-
MD5
125d91fe9cbee705ae73c4d936ea7ef5
-
SHA1
d153c76ea55022fddc0d172e6c2accfd397f4493
-
SHA256
9a89264c718f5e5bd132f1dc3599e52fd226373b46b4ac6dd615425949181920
-
SHA512
469532d10111dd00308886b2542d7ac1184317c8b5794047542140e5531115be335b2386872d301d809415137834896be6cacb26ac25c102176b9ffdf5999814
-
SSDEEP
1536:+2RjutTp+gwBO/VYOrdE2/qQpjVrs2ryrd1vUQuq6:+2GTp+PBmrvHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 125d91fe9cbee705ae73c4d936ea7ef5
Files
-
125d91fe9cbee705ae73c4d936ea7ef5.exe windows:4 windows x86 arch:x86
50d0ec8d74260c639bc5cb48df042468
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleAliasExesLengthA
EscapeCommFunction
GetCPInfo
MoveFileExA
DefineDosDeviceW
OutputDebugStringA
PeekNamedPipe
lstrlenW
FoldStringA
SetLocalTime
SetConsolePalette
QueryDosDeviceA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE