Static task
static1
Behavioral task
behavioral1
Sample
e25a4bf6cd57975e42a3cf26a8b2d5ffb4a485eda951751608b3b8abbff7d525.exe
Resource
win7-20240903-en
General
-
Target
e25a4bf6cd57975e42a3cf26a8b2d5ffb4a485eda951751608b3b8abbff7d525
-
Size
6.5MB
-
MD5
c3797670397ca66b36ba5c158889b00b
-
SHA1
b09642cb371e7b0e738593e5babd9e6171a4c10d
-
SHA256
e25a4bf6cd57975e42a3cf26a8b2d5ffb4a485eda951751608b3b8abbff7d525
-
SHA512
8135d7c5680364dc7ceac10a470ea806d554db35e887e5fa79a1ceb09873ef05ca273a8dca3f009e1d3bae9a01ad5890495d547ffbfe0ca5b4ca8f1c953dec98
-
SSDEEP
196608:3dYHQzq4mFo8XtkpE1ObWcXEkZ+r8/rZxxPovS4TojJkAGzpJmyTx:3sQW4gDXtQEQbuk7DZxxIbTo6PJPx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e25a4bf6cd57975e42a3cf26a8b2d5ffb4a485eda951751608b3b8abbff7d525
Files
-
e25a4bf6cd57975e42a3cf26a8b2d5ffb4a485eda951751608b3b8abbff7d525.exe windows:5 windows x86 arch:x86
f073bd9dd79c7a1dbc51ccea2789361d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
winmm
midiStreamStop
ws2_32
WSACleanup
msvfw32
DrawDibDraw
avifil32
AVIStreamGetFrame
kernel32
VirtualProtect
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
CreateWindowExA
gdi32
SetTextColor
winspool.drv
DocumentPropertiesA
comdlg32
GetSaveFileNameA
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
SysAllocString
comctl32
ImageList_GetImageCount
Sections
.text Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 503KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 481KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp3.60 Size: - Virtual size: 953KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp3.61 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ