Static task
static1
Behavioral task
behavioral1
Sample
25c0b03b1e205d4e307fed05588217ec.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
25c0b03b1e205d4e307fed05588217ec.exe
Resource
win10v2004-20231215-en
General
-
Target
25c0b03b1e205d4e307fed05588217ec
-
Size
332KB
-
MD5
25c0b03b1e205d4e307fed05588217ec
-
SHA1
67505180ba44556203b40879b7055c0d2208c535
-
SHA256
5d40ad5ad7ddee04c74ba26581012defbfc81cb15e3d7544f4970ffe54d7a512
-
SHA512
90b85d699fe3c182964465fe1186b4a405d364a2209669dd4e8966988bbe768c5f55ac7d42965396d589ddca8db1027d38b3e306304c2db24e72096928b42a10
-
SSDEEP
6144:yO+6qrdpFNb/s0PJFChF56UA8RN/UIa5CxVOjsP5i/7IGjqhPHsQ4Ra:B+6qL/qh6SN3aMxVFxOW/sQ4E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25c0b03b1e205d4e307fed05588217ec
Files
-
25c0b03b1e205d4e307fed05588217ec.exe windows:4 windows x86 arch:x86
373ba7e4ffd7cf8dc231af2b814dd006
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteObject
SetBkMode
SetTextAlign
SetTextColor
SetBkColor
DeleteDC
ExtTextOutW
SelectObject
CreateCompatibleDC
kernel32
GetCommandLineW
FreeLibrary
GetProcAddress
GetStringTypeA
LoadLibraryA
WideCharToMultiByte
DeleteFileA
GetFileAttributesA
GetTempPathA
GetTempPathW
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetFileSize
LockFile
LockFileEx
UnlockFile
oleaut32
SafeArrayDestroyDescriptor
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString
user32
GetKeyState
EnableWindow
CharLowerA
msimg32
TransparentBlt
Sections
.text Size: 209KB - Virtual size: 261KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE