Static task
static1
Behavioral task
behavioral1
Sample
425d5e264853509188ad9f3f61e666c2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
425d5e264853509188ad9f3f61e666c2.exe
Resource
win10v2004-20231215-en
General
-
Target
425d5e264853509188ad9f3f61e666c2
-
Size
716KB
-
MD5
425d5e264853509188ad9f3f61e666c2
-
SHA1
8ff238f8f31f9959b87ed35c8a2ecaef3a1af6d8
-
SHA256
e2845bdd5abb3e909fe5a9b25b8e8f712c6f859bddd02200c2a2a06bb35d0cef
-
SHA512
f60e848fbb49b90b8f7a4f49309b4849eab05e1cb3674f6efc1c1b5f4569116a50075c9ab924e5deab26be437c0f321306e2109352bd8418faf0c5f84991cff7
-
SSDEEP
12288:HFcGK39yGS4Y7I42J2p5yVMIST5VDF3Z4mxxTo5oSxlEdUkMn:KDYx2J2iVGQmXsmSxlOUkMn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 425d5e264853509188ad9f3f61e666c2
Files
-
425d5e264853509188ad9f3f61e666c2.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 400KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE