Static task
static1
Behavioral task
behavioral1
Sample
25e94d417bfa197bf6acba412849912e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
25e94d417bfa197bf6acba412849912e.exe
Resource
win10v2004-20231215-en
General
-
Target
25e94d417bfa197bf6acba412849912e
-
Size
2.8MB
-
MD5
25e94d417bfa197bf6acba412849912e
-
SHA1
fa5f648d202cb6f643bfa735372c89a685094fd2
-
SHA256
8ae940a5d33e9ddfeba0dcd6f0e94a0d327ccd43ac615bdeb66ab61ebb4900d9
-
SHA512
2572ec6117693e81b6650cdb8db3fef410db44cf387d0be9ea433b83ec0c674bf034740fc8509fd6e11ac92400c79cd3dc8ab318ba3809b14ad304015381a530
-
SSDEEP
49152:PCCUDak2vm9RF2PITSQOHpW+33PLTbGOrqruUa/2Zv14oYG0/Mf8m:PC1Dak2vm9X2PI+6+Hz2AqruUaYSJ/tm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25e94d417bfa197bf6acba412849912e
Files
-
25e94d417bfa197bf6acba412849912e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 293KB - Virtual size: 888KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.4MB - Virtual size: 21.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE