Static task
static1
Behavioral task
behavioral1
Sample
1825f5191fbaf932e5d50aa6ec43d0da3d6ca36eb18d883ee8075625ba11a0cf.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1825f5191fbaf932e5d50aa6ec43d0da3d6ca36eb18d883ee8075625ba11a0cf.exe
Resource
win10v2004-20240419-en
General
-
Target
1825f5191fbaf932e5d50aa6ec43d0da3d6ca36eb18d883ee8075625ba11a0cf
-
Size
90KB
-
MD5
1ff4a52bf52d7c03429040d66ef479d6
-
SHA1
daa568a3ef666dc990aa5a585297a5342a44969b
-
SHA256
1825f5191fbaf932e5d50aa6ec43d0da3d6ca36eb18d883ee8075625ba11a0cf
-
SHA512
d1a28b0c82edb049c44598b0158fa4a68a055e93288bf6e8bc5786aea1b3249e2162efa9ae8611e865afb5e9e1dfafe15673bd5bd9695ecd9b3e721dcba36ff0
-
SSDEEP
1536:l/cK8KMw7yEREI6gqb8ybzUuHZozqXMb73o7qbn8BMQ8XCfOOQ/4BrGTI5Yxj:lgm7yEREtgzybzUuHZozqXMb73oQw8Ow
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1825f5191fbaf932e5d50aa6ec43d0da3d6ca36eb18d883ee8075625ba11a0cf
Files
-
1825f5191fbaf932e5d50aa6ec43d0da3d6ca36eb18d883ee8075625ba11a0cf.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.pdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ