Static task
static1
Behavioral task
behavioral1
Sample
25ea9c08fe950b75af264bb247d1f41c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
25ea9c08fe950b75af264bb247d1f41c.exe
Resource
win10v2004-20231215-en
General
-
Target
25ea9c08fe950b75af264bb247d1f41c
-
Size
385KB
-
MD5
25ea9c08fe950b75af264bb247d1f41c
-
SHA1
3ac9d5f80f9975f6baed44232bb3a7788464238c
-
SHA256
51ce18d71d56378aeac1da522011cfc42c96d5c224638ee1806eb5d0ec87216a
-
SHA512
a879ffa8ae6043837c9c8f88d6c513f9fa1c0b883b2cf9465b428cbafe85027ba1e0241083d2be24906bf31c75bfc4312cec925cf599b4017afbefae5dab9009
-
SSDEEP
12288:zrcpRmarpOBLkneNTkA5VqXd2s2EdTXkkgdOKcZB:/farpOHTkA5MYAdTXkP6B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25ea9c08fe950b75af264bb247d1f41c
Files
-
25ea9c08fe950b75af264bb247d1f41c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ