Static task
static1
Behavioral task
behavioral1
Sample
25bab101c0d38f8d7b90f9f551a3b620.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
25bab101c0d38f8d7b90f9f551a3b620.exe
Resource
win10v2004-20231215-en
General
-
Target
25bab101c0d38f8d7b90f9f551a3b620
-
Size
23KB
-
MD5
25bab101c0d38f8d7b90f9f551a3b620
-
SHA1
5bce29a08cf41069c1c79913ed8b3cb4df4a4592
-
SHA256
ade66bf79253d01184310c2bd5f5576ed500647a9baef77d2453837d3e2ab03d
-
SHA512
573cfcaf45183ba9c030e980f4b1b6a082f46cd387f8c868df0f98d125979e7495d5e027791d374ff1b5c8c7a61c212c87de64b7de86ebe3a13ad0f8f1904544
-
SSDEEP
384:U6HGu1TgN2ZaJX9F7ZoWonpGGLRiwtz56SgH2wvOcCLkrOvJ/EQq6URE6sS+J:UAaN2ZgX9roWoAE5erH2ubNSB8s6a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25bab101c0d38f8d7b90f9f551a3b620
Files
-
25bab101c0d38f8d7b90f9f551a3b620.exe windows:4 windows x86 arch:x86
39c87c5cea161696eacaa4d7cdc6a324
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
select
kernel32
GetMailslotInfo
user32
MapVirtualKeyExW
gdi32
ExtTextOutW
advapi32
RegCreateKeyW
shell32
ShellAboutW
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 50B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ