Static task
static1
Behavioral task
behavioral1
Sample
c25b60d3087c2cdd3fb4ee82788c6785905e74e01ce00f1e59ae57f38d01eabc.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
c25b60d3087c2cdd3fb4ee82788c6785905e74e01ce00f1e59ae57f38d01eabc.exe
Resource
win10v2004-20240426-en
General
-
Target
c25b60d3087c2cdd3fb4ee82788c6785905e74e01ce00f1e59ae57f38d01eabc
-
Size
932KB
-
MD5
cf5dde2d4c4c88f5bcc04bfb9e1fd069
-
SHA1
f9a1477b51bede0243a3af76da3b7db2eb13b2dc
-
SHA256
c25b60d3087c2cdd3fb4ee82788c6785905e74e01ce00f1e59ae57f38d01eabc
-
SHA512
a34064d86c02453df19514446e4476c1c83d3b25be0f31edbdc11a2075c5a63ad261f5f27085c9454fa6be6a21d1a6db5b3e5bc4b5f95094b7ebdc5975986e40
-
SSDEEP
192:xPuTunAtt5Pg1lld07xFVd4yywe/2D4Ec7KdT:tYcAP+PlOzVdNpe/REmi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c25b60d3087c2cdd3fb4ee82788c6785905e74e01ce00f1e59ae57f38d01eabc
Files
-
c25b60d3087c2cdd3fb4ee82788c6785905e74e01ce00f1e59ae57f38d01eabc.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ