Static task
static1
Behavioral task
behavioral1
Sample
25f9e85eddc8359a7e0c540c3baa0f20.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
25f9e85eddc8359a7e0c540c3baa0f20.exe
Resource
win10v2004-20231215-en
General
-
Target
25f9e85eddc8359a7e0c540c3baa0f20
-
Size
1.1MB
-
MD5
25f9e85eddc8359a7e0c540c3baa0f20
-
SHA1
4456302006e442a01634b79ee23d28d44e2f10d0
-
SHA256
b97a1ec4e082dc2238de13e53e72c0dde3c7f204725a4004be7c51a1cdc534e4
-
SHA512
94a7caeb2a36ae46a54edf1504cabb33e21b0f4e58fbbc67b5208a2fe46a77c7d5253028dbb6f6958da8eddc3a8d7399744c89b5337007875d18d2580b8af9dc
-
SSDEEP
24576:JSZjR1M8zyqwiWGJ7TwWuHqYctPEMQ6nWOnEJFK2:JY1M8zvd4FctZtWOEJFK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25f9e85eddc8359a7e0c540c3baa0f20
Files
-
25f9e85eddc8359a7e0c540c3baa0f20.exe windows:4 windows x86 arch:x86
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Sections
CODE Size: 322KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 737KB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE