Static task
static1
Behavioral task
behavioral1
Sample
25f36c8a15aaf177f520c52552554862ec6dac5346853412620e04f0db46cb06.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
25f36c8a15aaf177f520c52552554862ec6dac5346853412620e04f0db46cb06.exe
Resource
win10v2004-20240419-en
General
-
Target
25f36c8a15aaf177f520c52552554862ec6dac5346853412620e04f0db46cb06
-
Size
2.3MB
-
MD5
58c9853a91b8ca4bb1b036a686644d47
-
SHA1
6aa478e5a350eb3fe4fd7db40cccc3c3e4a0f41d
-
SHA256
25f36c8a15aaf177f520c52552554862ec6dac5346853412620e04f0db46cb06
-
SHA512
9e01b4ca1112afb7573049867d1fa06389b9a07694fce5c2223ec6438abff365e0fdc55cdc0d95706621c156e25661050f4f72e606b7519df301d452c601137c
-
SSDEEP
49152:18VqQOHKAW/DoDilt49/zByy+cyTHnrpwvfE3AWV:1GXOHKAWboulKByy+c6Hnd0cw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25f36c8a15aaf177f520c52552554862ec6dac5346853412620e04f0db46cb06
Files
-
25f36c8a15aaf177f520c52552554862ec6dac5346853412620e04f0db46cb06.exe windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 121KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 288KB - Virtual size: 929KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mgvvepho Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
joxyjjxi Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE