Behavioral task
behavioral1
Sample
25e380c84c6595390ce55de0f5f78462c6b2fbad959a8f714afc8c662bd54534.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
25e380c84c6595390ce55de0f5f78462c6b2fbad959a8f714afc8c662bd54534.exe
Resource
win10v2004-20221111-en
General
-
Target
25e380c84c6595390ce55de0f5f78462c6b2fbad959a8f714afc8c662bd54534
-
Size
884KB
-
MD5
2d7fbd6b16aab5750680ba24cc4ceb5e
-
SHA1
a3ffa0653ca6476d0923f274443059d63980a867
-
SHA256
25e380c84c6595390ce55de0f5f78462c6b2fbad959a8f714afc8c662bd54534
-
SHA512
0b4d926e897978f33dd52c2b2b7f7c40d2a01ff187a89b987d3418c55e5f79afb40a2b52efb02f49404317e8751fcb0c9d444b2f6dcddbafca3070a1446d2629
-
SSDEEP
24576:ML5XT+HvcwR6VBcmWn1+b0v/c6vzfvI0aGrif5:M1qP6crpzo0aaE5
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
25e380c84c6595390ce55de0f5f78462c6b2fbad959a8f714afc8c662bd54534.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 871KB - Virtual size: 872KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE