Static task
static1
Behavioral task
behavioral1
Sample
125b45df6f0bb4b71daf8ae7120f9cdba1693b0138e10d1789bbed0b2bc65796N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
125b45df6f0bb4b71daf8ae7120f9cdba1693b0138e10d1789bbed0b2bc65796N.exe
Resource
win10v2004-20241007-en
General
-
Target
125b45df6f0bb4b71daf8ae7120f9cdba1693b0138e10d1789bbed0b2bc65796N
-
Size
40KB
-
MD5
29b490f1f72c24eec6341f9554abad70
-
SHA1
29ab1c8cf6163811ea11961c980d50bcb9f1e092
-
SHA256
125b45df6f0bb4b71daf8ae7120f9cdba1693b0138e10d1789bbed0b2bc65796
-
SHA512
44279b95b668ee9ab49b67e84eb0678568147c372cc5b9db3ee7759f4b489ec1a421ce5b28da76f2989ab89c685afde75d660e022123ff76c068ee84a595ef0e
-
SSDEEP
768:Nwi51VjhUdZdf3iE5iSNhPPyHo4tCt39tbr2W556fyRtVmAZ7DAy:f5LjhUdZdf1JhXeo4tcNh55uyR7mAOy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 125b45df6f0bb4b71daf8ae7120f9cdba1693b0138e10d1789bbed0b2bc65796N
Files
-
125b45df6f0bb4b71daf8ae7120f9cdba1693b0138e10d1789bbed0b2bc65796N.exe windows:4 windows x86 arch:x86
6d9720d6f9399cca1d54c1efcf068e2c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
MessageBoxA
advapi32
GetUserNameW
ole32
CoInitialize
Sections
.MPRESS1 Size: 28KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE