Static task
static1
Behavioral task
behavioral1
Sample
25db85bf7f20368580e4659017acc26c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
25db85bf7f20368580e4659017acc26c.exe
Resource
win10v2004-20231215-en
General
-
Target
25db85bf7f20368580e4659017acc26c
-
Size
24KB
-
MD5
25db85bf7f20368580e4659017acc26c
-
SHA1
3e0362ed5c762a283b6a06625cd62e66f133c02c
-
SHA256
b36cd802636f35360b40588eac94fdf2d838a35a54e12302acd829db200af714
-
SHA512
9a833fbf32adc0ddc21d0597cf33a4cd2c5cf1973e4031592004c9a4b6213d97bf37fee2584503617bba8d4cde1f35060ec7b44e5b1efe7e1f17578cb61c9e9b
-
SSDEEP
384:I/G+nv32t8qr++u0Tp1b4cviPqt2IBJfgdcHhT6IHYn9hYA3pe:Ie+nvGyYj/Vt2IbbHhTN49CA3p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25db85bf7f20368580e4659017acc26c
Files
-
25db85bf7f20368580e4659017acc26c.exe windows:4 windows x86 arch:x86
e70cf4a7ed42a3950dec41a3aca424a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileTime
GetConsoleMode
FindAtomA
DeleteAtom
Sleep
WriteFile
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 17.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ