Static task
static1
Behavioral task
behavioral1
Sample
4b25a285db67e2f43ab50c0e129283c8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4b25a285db67e2f43ab50c0e129283c8.exe
Resource
win10v2004-20231222-en
General
-
Target
4b25a285db67e2f43ab50c0e129283c8
-
Size
178KB
-
MD5
4b25a285db67e2f43ab50c0e129283c8
-
SHA1
8f1b76e89d14f6b5c072b7486ff8a715ca9d6cc3
-
SHA256
42fe9ed0d180124965655b7c6c76628f45301a3d168862fa12e672f350d9e88d
-
SHA512
65e9bae8f8b4c858dc84fc5c83253c105317d3ec453a6d7025809fa62d4361b499c19b412588609fe6e290b11f2f48992c42f76241cb73bc116af9bb5087c680
-
SSDEEP
3072:lbq+fW3kCFrWsF2eLST/RZzVP5iZahJ6UaeEqxF6snji81RUinKQ41:lC3PFKs7STL6eEqxF6snji81RUinKn1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b25a285db67e2f43ab50c0e129283c8
Files
-
4b25a285db67e2f43ab50c0e129283c8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 208KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ