Behavioral task
behavioral1
Sample
2f25f4ace25380a55abe930dd7bdf33894284aff247e05c6df1266d0cdc8f81e.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2f25f4ace25380a55abe930dd7bdf33894284aff247e05c6df1266d0cdc8f81e.exe
Resource
win10v2004-20230915-en
General
-
Target
2f25f4ace25380a55abe930dd7bdf33894284aff247e05c6df1266d0cdc8f81e
-
Size
3.7MB
-
MD5
29fb54cc2048bbe61454dece72324c11
-
SHA1
5e2c4434e91a1ab700794deeed4d06c34f9e3aab
-
SHA256
2f25f4ace25380a55abe930dd7bdf33894284aff247e05c6df1266d0cdc8f81e
-
SHA512
23df96d0b5790c7f160c886336cec3f7668aab72cf2e67a1bdb4a1b58cab618ecf326c6e545c840afb7fd2b70233fcbf511e99af119bde73e29d002c539f5a71
-
SSDEEP
98304:ic5ZIR8lG4uP+/+Ko0r+oESzKXcccRKBRvG9Vq5:iRE00rESzUlDBRO9V
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f25f4ace25380a55abe930dd7bdf33894284aff247e05c6df1266d0cdc8f81e
Files
-
2f25f4ace25380a55abe930dd7bdf33894284aff247e05c6df1266d0cdc8f81e.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 956KB - Virtual size: 956KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE