Static task
static1
Behavioral task
behavioral1
Sample
125d602913632fb42d78a85234d02b83.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
125d602913632fb42d78a85234d02b83.exe
Resource
win10v2004-20231215-en
General
-
Target
125d602913632fb42d78a85234d02b83
-
Size
96KB
-
MD5
125d602913632fb42d78a85234d02b83
-
SHA1
91f7cef8910de8f7333a002113b2a845f86efc71
-
SHA256
c5ae456fbdefb9b2364be0dfb2f63da570186353af4a9fea9a2dc783a0b35e63
-
SHA512
d8f4e68c980bd32bf8c9d595c92180733165aff07ff26fe455ef79a555d881e121cc88bc6a52576e1af76365d50087f80d5af28cfd00da3d3d50285afd6bf927
-
SSDEEP
1536:jHLqVTvNFweCzWEEEgCnqM7sbUWa7XOD2pFfDlhWT:jHktBfMFfDl0T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 125d602913632fb42d78a85234d02b83
Files
-
125d602913632fb42d78a85234d02b83.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ