Static task
static1
Behavioral task
behavioral1
Sample
25f2e96312783c5bec227777f69ff314ca3419701a67567a72a826ee3a1fb0e0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
25f2e96312783c5bec227777f69ff314ca3419701a67567a72a826ee3a1fb0e0.exe
Resource
win10v2004-20231215-en
General
-
Target
25f2e96312783c5bec227777f69ff314ca3419701a67567a72a826ee3a1fb0e0
-
Size
161KB
-
MD5
4369bd5c4f1d8b190286da9039a7d134
-
SHA1
ca7492ace2d9682fef5e7efb994c82e158ba5dd9
-
SHA256
25f2e96312783c5bec227777f69ff314ca3419701a67567a72a826ee3a1fb0e0
-
SHA512
3d79e115df3802e23bb175c4f496e7d6e06400b6cb51474ebf39bc7375689933c3dd8602a2a7da6a3adf2de8cb3bcde3de642b9cf03a105b30cd8f7e14f91377
-
SSDEEP
1536:e/kHduxoecoubtu8Jsz9LLSGXM6a4Bg2LBm6/QnFLua4QKk2ffy0kJtSsywsEuYM:e/kHUelvbtubBPSGI12LU6o5uZWFxoPp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25f2e96312783c5bec227777f69ff314ca3419701a67567a72a826ee3a1fb0e0
Files
-
25f2e96312783c5bec227777f69ff314ca3419701a67567a72a826ee3a1fb0e0.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ