Static task
static1
Behavioral task
behavioral1
Sample
c525f8976fd6ecb8e3ecb8f5b8a87906089d3cb1c4563ec23aad0e5d55b886bcN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c525f8976fd6ecb8e3ecb8f5b8a87906089d3cb1c4563ec23aad0e5d55b886bcN.exe
Resource
win10v2004-20241007-en
General
-
Target
c525f8976fd6ecb8e3ecb8f5b8a87906089d3cb1c4563ec23aad0e5d55b886bcN
-
Size
90KB
-
MD5
65593e04c66c3a9e84a510f2dfd779d0
-
SHA1
002a6cc76cb59ec8f0ae15cc22bc6057c1b2ce3d
-
SHA256
c525f8976fd6ecb8e3ecb8f5b8a87906089d3cb1c4563ec23aad0e5d55b886bc
-
SHA512
d6961fd43949373d912fe44563d537c48609a36fde54e8be524f37f5402461817d47ac44bf4ce3c9eff2c8f13df544c314800cf2dd10c5847f82bff8a87a3819
-
SSDEEP
1536:piBRqyV2WKaBUNhSMMNPeuR7TY0IdjxvkZDAI/VfEPXffOOQ/4BrGTI5Yxj:gSGDKaeNwMMNN9IdYhMP3U/4kT0Yxj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c525f8976fd6ecb8e3ecb8f5b8a87906089d3cb1c4563ec23aad0e5d55b886bcN
Files
-
c525f8976fd6ecb8e3ecb8f5b8a87906089d3cb1c4563ec23aad0e5d55b886bcN.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.pdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ