Static task
static1
Behavioral task
behavioral1
Sample
25b1f353786c810d087dcbd7f9f8a48f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
25b1f353786c810d087dcbd7f9f8a48f.exe
Resource
win10v2004-20231215-en
General
-
Target
25b1f353786c810d087dcbd7f9f8a48f
-
Size
10KB
-
MD5
25b1f353786c810d087dcbd7f9f8a48f
-
SHA1
1535d7c078f0a7512fbf8efeabcea0568f306a87
-
SHA256
3b8511f7be1d1df6c5057ceeb47a5873bddc97d355d7039166ca41dc6c9788ca
-
SHA512
37a6f4a46986f10aa4144c07ef10ef4f6ce7dd46c028d220c178f75573a625260e62373dba88453b36960ba3d570700c0b469ea21a4334800ad984781f1824e0
-
SSDEEP
192:YYh7v6lw3HRpAUc4RxwurAdbwG/6zlErnxszRF2z5hiD3CB0RqYpBvkRD:pJvPxpbvLsLS6ncfaXxB0Rq/D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25b1f353786c810d087dcbd7f9f8a48f
Files
-
25b1f353786c810d087dcbd7f9f8a48f.exe windows:4 windows x86 arch:x86
057509c9a5b7404376516cf2abfd25ad
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BuildCommDCBAndTimeoutsW
CopyFileExW
EnumCalendarInfoW
ExitProcess
GetBinaryType
GetProcessTimes
GetStartupInfoW
GetTimeFormatA
InterlockedExchangeAdd
IsProcessorFeaturePresent
LocalFree
OpenProfileUserMapping
OpenWaitableTimerW
ReleaseSemaphore
SetMessageWaitingIndicator
SetSystemTimeAdjustment
SetThreadContext
SystemTimeToFileTime
WaitForSingleObjectEx
_lclose
advapi32
AccessCheck
BuildSecurityDescriptorW
CloseServiceHandle
ConvertSecurityDescriptorToAccessA
CreateServiceW
CryptDuplicateHash
CryptGetUserKey
CryptImportKey
CryptSetProviderA
CryptSetProviderExA
CryptSignHashW
DuplicateToken
EnumDependentServicesW
GetFileSecurityW
LookupAccountSidW
ObjectPrivilegeAuditAlarmW
OpenSCManagerA
OpenThreadToken
QueryServiceStatus
RegCreateKeyExW
RegQueryValueA
RegQueryValueExW
RegQueryValueW
RegReplaceKeyW
RegSetValueExW
ReportEventA
SetEntriesInAccessListW
SetNamedSecurityInfoW
SetSecurityInfoExA
user32
BlockInput
CharUpperBuffA
CheckMenuItem
CreateDialogParamA
DdeQueryConvInfo
EnumDisplaySettingsA
GetGUIThreadInfo
GetInputState
GetMessageExtraInfo
GetNextDlgTabItem
GetWindowTextLengthW
IMPGetIMEA
ImpersonateDdeClientWindow
InflateRect
InvertRect
IsWindowUnicode
LoadKeyboardLayoutA
MessageBeep
MessageBoxIndirectA
OpenIcon
OpenInputDesktop
OpenWindowStationW
RegisterHotKey
SetDeskWallpaper
SetLogonNotifyWindow
Sections
.text Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ