Static task
static1
Behavioral task
behavioral1
Sample
125e2689aed7c4542227eeb7906dd2e5e2807bb29185a07b1bbff7aaeb1d2856.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
125e2689aed7c4542227eeb7906dd2e5e2807bb29185a07b1bbff7aaeb1d2856.exe
Resource
win10v2004-20240508-en
General
-
Target
125e2689aed7c4542227eeb7906dd2e5e2807bb29185a07b1bbff7aaeb1d2856
-
Size
648KB
-
MD5
5900ed227063ed5ba02ff34f97d8dca0
-
SHA1
0bf8349d1e1783c690e7e66de99bab69fd988019
-
SHA256
125e2689aed7c4542227eeb7906dd2e5e2807bb29185a07b1bbff7aaeb1d2856
-
SHA512
e1bae18e9c668664d0beb3c31b9d397fe2e81995001719af0bf8bff8ade0a216f784afabece2b64c5bf7625edce2423a801e62f8ab9dd8b45537342b093527d9
-
SSDEEP
6144:zhP66EhVcfQJ5ISq0RNDOvlkKw5/KHHR5/KHHW1DXkcW/rr/6z8ri2SyKev/gTFe:w6XfbyKg/KHP/KH+4iiwEA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 125e2689aed7c4542227eeb7906dd2e5e2807bb29185a07b1bbff7aaeb1d2856
Files
-
125e2689aed7c4542227eeb7906dd2e5e2807bb29185a07b1bbff7aaeb1d2856.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 351KB - Virtual size: 351KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 296KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ