Static task
static1
Behavioral task
behavioral1
Sample
025d3c3be0b3a66cffc5286ba2c6cf14.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
025d3c3be0b3a66cffc5286ba2c6cf14.exe
Resource
win10v2004-20231222-en
General
-
Target
025d3c3be0b3a66cffc5286ba2c6cf14
-
Size
36KB
-
MD5
025d3c3be0b3a66cffc5286ba2c6cf14
-
SHA1
5672e08cd727896286052065188e38cdda594e2e
-
SHA256
5284b1dab02f1e05639081b93c6f44a42bc003aa6bf5a463f9a33b173710a4e5
-
SHA512
8c4a207f62a36c1a2fbb6255025a912543783d33de7d40f206e55e602c674838779d94c962864dcf3bcea9d807a92f73f740b1d46bf19633a01f5b30de88bce5
-
SSDEEP
384:/3Slu8YW4DKQCnOcXaaAkbLzyOi2+jo6/:/3S4W4ev/hznidjo6/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 025d3c3be0b3a66cffc5286ba2c6cf14
Files
-
025d3c3be0b3a66cffc5286ba2c6cf14.exe windows:4 windows x86 arch:x86
f743f49cf60c8ca8c607f9a91a594244
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
Process32Next
Process32First
lstrlenA
GetSystemDirectoryA
WinExec
Sleep
VirtualAllocEx
WriteProcessMemory
GetModuleHandleA
GetProcAddress
CreateRemoteThread
CreateToolhelp32Snapshot
GetCurrentProcess
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
GetStringTypeA
GetStringTypeW
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
LoadLibraryA
advapi32
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenProcessToken
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE