Static task
static1
Behavioral task
behavioral1
Sample
25c284b66ff946307eea7ace2c9abef767cb9a3aaaa3d2e69d11db041ad3727d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
25c284b66ff946307eea7ace2c9abef767cb9a3aaaa3d2e69d11db041ad3727d.exe
Resource
win10v2004-20231215-en
General
-
Target
25c284b66ff946307eea7ace2c9abef767cb9a3aaaa3d2e69d11db041ad3727d
-
Size
12KB
-
MD5
bf21af867a4a41795bcbadc6b4185f8b
-
SHA1
b3c848cc0f9088959e79a32aece707fa52b5bd6e
-
SHA256
25c284b66ff946307eea7ace2c9abef767cb9a3aaaa3d2e69d11db041ad3727d
-
SHA512
43e08625a74e7842c2cebfc1460b3e0357e17f41569b0ca9c7cf4dae03369b5148f061ef623ccace3b0fc85d2b64cf067078772dab978ced4a0968bc758a362b
-
SSDEEP
192:z/xrdUzMh673yrQvGYhW8snIT+aCbSd1nAO1bJY2eIjc1tr+fFMuWMSs:RdizK8cSDAO9v6MfxWMS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25c284b66ff946307eea7ace2c9abef767cb9a3aaaa3d2e69d11db041ad3727d
Files
-
25c284b66ff946307eea7ace2c9abef767cb9a3aaaa3d2e69d11db041ad3727d.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ