Static task
static1
Behavioral task
behavioral1
Sample
25cfcdfd2fb38f814a2acdeb32bdbd9f3f4d8d5d2c0bf8d0f640c71696d8608cN.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
25cfcdfd2fb38f814a2acdeb32bdbd9f3f4d8d5d2c0bf8d0f640c71696d8608cN.exe
Resource
win10v2004-20241007-en
General
-
Target
25cfcdfd2fb38f814a2acdeb32bdbd9f3f4d8d5d2c0bf8d0f640c71696d8608cN
-
Size
64KB
-
MD5
724a7a50ecb999e684bda5f57accd0f0
-
SHA1
1344cec690f035baa0a877bda4af5f01a72eef93
-
SHA256
25cfcdfd2fb38f814a2acdeb32bdbd9f3f4d8d5d2c0bf8d0f640c71696d8608c
-
SHA512
ae1a44c0f90f66d4c332452b42fefb10dcdf5e7597c6827760aaa6f9b52d02895d850caf82f6dcbfe4d9e6ba5af3f026a7c921cd5a04e21e85398a25052f5b19
-
SSDEEP
768:IWi7vmrR4bo9OP1hrTFdM1fbElvvcgemAsTUCLYZq5YvtjydU2p/1H5wI7XdnhYx:zi7vu4bxP/jkfQBhPsZq5YGU2LbAMCeW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25cfcdfd2fb38f814a2acdeb32bdbd9f3f4d8d5d2c0bf8d0f640c71696d8608cN
Files
-
25cfcdfd2fb38f814a2acdeb32bdbd9f3f4d8d5d2c0bf8d0f640c71696d8608cN.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ