Static task
static1
Behavioral task
behavioral1
Sample
25500ed17e5a5ba3614e7c25f8ab51bd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
25500ed17e5a5ba3614e7c25f8ab51bd.exe
Resource
win10v2004-20231215-en
General
-
Target
25500ed17e5a5ba3614e7c25f8ab51bd
-
Size
21KB
-
MD5
25500ed17e5a5ba3614e7c25f8ab51bd
-
SHA1
460b94a79bb2ec2ed22abb054da9102c24eaea16
-
SHA256
637a7bec187796db87323995a5bfe907d645aa6cfdf53bace4bd78adba45146c
-
SHA512
c3ab9c7104c3a5634f03f54dc04774983b0b921c53f2685529ff369e829d07c6e22cf8669dd5d639e5bf73c870b8d483a7c323d343cb4f08dd25668da8944284
-
SSDEEP
384:/fkAHoERfplPufftNPpyfmLk24jXPlGa3XECkzQhQFMe:0AH7Llycy2XP8JR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25500ed17e5a5ba3614e7c25f8ab51bd
Files
-
25500ed17e5a5ba3614e7c25f8ab51bd.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 151B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ