Static task
static1
Behavioral task
behavioral1
Sample
825afe522944e935f33a6989370fe3f7b15ca207dbc200e69f65c9143e48232b.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
825afe522944e935f33a6989370fe3f7b15ca207dbc200e69f65c9143e48232b.exe
Resource
win10v2004-20240802-en
General
-
Target
825afe522944e935f33a6989370fe3f7b15ca207dbc200e69f65c9143e48232b
-
Size
29KB
-
MD5
f5a6b1645767ce472e4b8f70a20d2c42
-
SHA1
4b3ef49cf3b02c3076cd62803c6a7bf62fb9b53e
-
SHA256
825afe522944e935f33a6989370fe3f7b15ca207dbc200e69f65c9143e48232b
-
SHA512
e2ca325f8d00ec5cd9fc467152accd56a47d24414bc2ccd1843c3cd3111cb76e0549b04c5107aa9b3ab725ed24f8f9d41ca750e42af293b31d5390e8e12ecd7f
-
SSDEEP
384:pv5hXbKCRpYVXQlKEWZhLJTZw952qdIOm8FqXcfLc5IxmyOqoWz1asZi8zJobwJ+:pxyXgSL5ZdOml6IyL9NJTu7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 825afe522944e935f33a6989370fe3f7b15ca207dbc200e69f65c9143e48232b
Files
-
825afe522944e935f33a6989370fe3f7b15ca207dbc200e69f65c9143e48232b.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ