Static task
static1
Behavioral task
behavioral1
Sample
251c54e0e722a3bc8ac5d4f69f887c69.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
251c54e0e722a3bc8ac5d4f69f887c69.exe
Resource
win10v2004-20231215-en
General
-
Target
251c54e0e722a3bc8ac5d4f69f887c69
-
Size
62KB
-
MD5
251c54e0e722a3bc8ac5d4f69f887c69
-
SHA1
77aabde3f00338263546661344dc4d65135c3439
-
SHA256
25bb7ef0a5a7488146f2b7ac4434c4fbb3aa7778ae6585a909730f451a10b54a
-
SHA512
10dd1ed6a02d2b35dd5d66d5d044ac9855aa3513f86f75f1ac54f35e2ed846c4fec7eb94c10ee94431083cfe15e6338d339aa196f956ed97c36df43dd24edccb
-
SSDEEP
1536:irlPCkaDlXzkRvqAwulO62sY/BBB0jWPS2q3JaH1mr:irlPC7Dl/ArH2W66Jfr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 251c54e0e722a3bc8ac5d4f69f887c69
Files
-
251c54e0e722a3bc8ac5d4f69f887c69.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 129KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 404KB - Virtual size: 46.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ