Static task
static1
Behavioral task
behavioral1
Sample
25125e95193cd7b05b58b2f18f9ddc888fa342b1c4060b6ab317b5315cb07d35.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
25125e95193cd7b05b58b2f18f9ddc888fa342b1c4060b6ab317b5315cb07d35.exe
Resource
win10v2004-20240426-en
General
-
Target
25125e95193cd7b05b58b2f18f9ddc888fa342b1c4060b6ab317b5315cb07d35
-
Size
137KB
-
MD5
d69d9b95a478886b76bb886bdfdd1619
-
SHA1
4b6e007c9ff9502a2c97d3ea158a0398f94495de
-
SHA256
25125e95193cd7b05b58b2f18f9ddc888fa342b1c4060b6ab317b5315cb07d35
-
SHA512
25cb6b87fb8c2940ad448a92b8a1c8cf7ef25657f53f70651f4ed45e92f2995029726ebd059acc92aab304321315d9950c1673366b492c690e36020a9bbb43f0
-
SSDEEP
1536:ctbun90EQJciCNnrYFhD8Nf2VQVgd54v:ct22LclNrYfD8Nf2VL7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25125e95193cd7b05b58b2f18f9ddc888fa342b1c4060b6ab317b5315cb07d35
Files
-
25125e95193cd7b05b58b2f18f9ddc888fa342b1c4060b6ab317b5315cb07d35.exe .vbs windows:4 windows x86 arch:x86 polyglot
56d36289945e1b8d661241dfad17ee85
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MapViewOfFile
CreateFileMappingA
GetFileSize
SetFileAttributesW
MultiByteToWideChar
lstrlenA
MoveFileExA
ReadFile
WinExec
GetTempFileNameA
SetFilePointer
CreateDirectoryA
ReleaseMutex
WaitForSingleObject
lstrcmpiA
lstrcpyA
lstrcmpA
GetEnvironmentVariableA
lstrcatA
GetDiskFreeSpaceA
GetModuleHandleA
Sleep
MoveFileA
GetLocalTime
GetCurrentProcess
FormatMessageA
GetLastError
GetTempPathA
GetComputerNameA
SetCurrentDirectoryA
GetSystemTime
WriteFile
VirtualFree
FileTimeToDosDateTime
SetEndOfFile
OutputDebugStringA
DosDateTimeToFileTime
ExitProcess
SetCurrentDirectoryW
SetFileTime
SystemTimeToFileTime
CreateProcessA
GetWindowsDirectoryA
GetVersion
CreateMutexA
CreateSemaphoreA
CreateThread
SizeofResource
LockResource
LoadResource
FindResourceA
DeviceIoControl
HeapFree
HeapAlloc
GetProcessHeap
GetDriveTypeA
GetLogicalDrives
GetLogicalDriveStringsA
FileTimeToSystemTime
ReleaseSemaphore
OpenSemaphoreA
UnmapViewOfFile
CreateFileA
GetFileTime
CloseHandle
DeleteFileA
FindFirstFileA
FindNextFileA
FindClose
GetModuleFileNameA
CopyFileA
SetFileAttributesA
GetShortPathNameA
lstrcpynA
LoadLibraryA
VirtualAlloc
GetProcAddress
user32
CharLowerBuffA
DialogBoxParamA
DefWindowProcA
SetTimer
ShowWindow
PostQuitMessage
EndDialog
KillTimer
wsprintfA
advapi32
InitializeSecurityDescriptor
LookupAccountNameA
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetFileSecurityA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegSaveKeyA
RegOpenKeyExA
RegRestoreKeyA
RegCloseKey
RegSetValueExA
RegQueryValueExA
InitializeAcl
shell32
SHChangeNotify
SHGetSpecialFolderPathA
ole32
CoInitialize
CoUninitialize
shlwapi
PathAddBackslashA
PathFileExistsA
PathQuoteSpacesA
msvcrt
__CxxFrameHandler
_strcmpi
atol
isdigit
_except_handler3
memmove
strchr
wcslen
strncmp
strrchr
atoi
_strlwr
strncpy
ws2_32
gethostbyname
WSAStartup
WSACleanup
inet_addr
Sections
.data Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ