Behavioral task
behavioral1
Sample
925b61e135cb94144fc379b651c5f3ac.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
925b61e135cb94144fc379b651c5f3ac.exe
Resource
win10v2004-20231215-en
General
-
Target
925b61e135cb94144fc379b651c5f3ac
-
Size
6.0MB
-
MD5
925b61e135cb94144fc379b651c5f3ac
-
SHA1
163b96b0b4a4fe74a7fa7a7c26a2af7d93d4d475
-
SHA256
487933423d2e1a3471acad1c5298fb058e41239424df843488045498210b9c6c
-
SHA512
ced2fab560a33c80a8b8e7970c5e215697cbee5873b2611d83b1403136a395d09a805ad4ac3049f0dc9e002495cff609bfdb76c235a701fe1f7fc58c5b3fe64c
-
SSDEEP
98304:2JCOMcakhy595sgp9cak/SsiTD4wPnQJcakhy595sgp9caklbwlyHVL7JKcakhyf:20bdBXTdAijPQJdBXTdWwly1X8dBXTdP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 925b61e135cb94144fc379b651c5f3ac
Files
-
925b61e135cb94144fc379b651c5f3ac.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE