Static task
static1
Behavioral task
behavioral1
Sample
25b2b0b131196b023a3d8285c07e08027452660e1643408b88bade4a92d7885d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
25b2b0b131196b023a3d8285c07e08027452660e1643408b88bade4a92d7885d.exe
Resource
win10v2004-20240508-en
General
-
Target
25b2b0b131196b023a3d8285c07e08027452660e1643408b88bade4a92d7885d.exe
-
Size
683KB
-
MD5
2a9a03453088bcabfdaf9c1ca971c400
-
SHA1
982c63e13884ce827981d9be26b02808f1ac2c8b
-
SHA256
25b2b0b131196b023a3d8285c07e08027452660e1643408b88bade4a92d7885d
-
SHA512
ea461fd8575dcf23e0fd7a8ced395d2f3a0ddf79bfbbd0726097a02a4519060e97210ca7535b5850208fa84c7a7c04bc681e238f30285761a9642342b30d9848
-
SSDEEP
12288:sHlh0MZEAmDLJ5YxuR7armOFyoZvGKFijqJRmC6jqmfJxhWG73YqaiLJ2zohngOk:4vZWJ5ckfOpOKFkmwRFfRWG73YqtLJ2P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25b2b0b131196b023a3d8285c07e08027452660e1643408b88bade4a92d7885d.exe
Files
-
25b2b0b131196b023a3d8285c07e08027452660e1643408b88bade4a92d7885d.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ