Static task
static1
Behavioral task
behavioral1
Sample
4b25f5126cc9090c2434f730441639c7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4b25f5126cc9090c2434f730441639c7.exe
Resource
win10v2004-20231215-en
General
-
Target
4b25f5126cc9090c2434f730441639c7
-
Size
61KB
-
MD5
4b25f5126cc9090c2434f730441639c7
-
SHA1
65665bc8b552e81137c76a73461d0e56fe239256
-
SHA256
6ab6423a105b80dbd17958a119813e7e5aa49a0e5ae0c22e0461231732f59130
-
SHA512
59ecdf9a0f633c1855bada6cd34ff0b9467b71ed85aafdc16f59186df8a45f9ce8fb5da219d88cefd8972a7aea7e15bf1831a3585aa2fa8a622ce72053395cc0
-
SSDEEP
1536:0XXOfeOMdiQbXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXmOT2iM:Ref3KiXNbb8BN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b25f5126cc9090c2434f730441639c7
Files
-
4b25f5126cc9090c2434f730441639c7.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tore Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE