Behavioral task
behavioral1
Sample
525351dbbdec78f6fc0ffc8c24fa65558421ebccf5b6fa5a3fb07504b2a19b66.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
525351dbbdec78f6fc0ffc8c24fa65558421ebccf5b6fa5a3fb07504b2a19b66.exe
Resource
win10v2004-20231025-en
General
-
Target
525351dbbdec78f6fc0ffc8c24fa65558421ebccf5b6fa5a3fb07504b2a19b66
-
Size
2.5MB
-
MD5
cc4471627dd07ef1a9dec6f5d3d19f14
-
SHA1
31e4dcc4dbfd54f27bdb6a6065ca8b9979383c1d
-
SHA256
525351dbbdec78f6fc0ffc8c24fa65558421ebccf5b6fa5a3fb07504b2a19b66
-
SHA512
65579179e2cabae1742b3213638d0194f2485154c99ba733d758b0bee788eb32b999efe29d6973a84d24f501c866e09fcf9723f27764da654da1f0d0fad377fd
-
SSDEEP
49152:kwQ4FcQtZYW0JBvm7bO9xpVrpxMui5dz958hE8YxUpqCQXDa+mk:NFzYW0BvIOzpGuISWU0tDik
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 525351dbbdec78f6fc0ffc8c24fa65558421ebccf5b6fa5a3fb07504b2a19b66
Files
-
525351dbbdec78f6fc0ffc8c24fa65558421ebccf5b6fa5a3fb07504b2a19b66.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 281KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE