Static task
static1
Behavioral task
behavioral1
Sample
525a73164007d85595f1cb6064d894d3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
525a73164007d85595f1cb6064d894d3.exe
Resource
win10v2004-20231215-en
General
-
Target
525a73164007d85595f1cb6064d894d3
-
Size
788KB
-
MD5
525a73164007d85595f1cb6064d894d3
-
SHA1
f7b1e2266a416772b0b0ace1cbe681e9c5c58d98
-
SHA256
3996be1fdb091b3ed2e4e3c6ec41a60ec87400a19295c03b68dfc16f129aa3c0
-
SHA512
6e57650c77e6b0b7405189ed788cd83d53065a504ba22c044e72ecaaccd1d6e37d987038c9869c5a2de3d6638583c785c9f9f90e9ab9b6b0f03634881580d1b8
-
SSDEEP
12288:O0Sw7D3T39xUG11utAiHJ85Vu7LPb+sDg/b8H3KnJj9iFVAJM1YNU1:O0R7n971wKi7LPb3DF3KJj2KM1b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 525a73164007d85595f1cb6064d894d3
Files
-
525a73164007d85595f1cb6064d894d3.exe windows:4 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
.text Size: 176KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 776KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 592KB - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE