Behavioral task
behavioral1
Sample
25b196ab32e5dbba05840ccbb95ccfe6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
25b196ab32e5dbba05840ccbb95ccfe6.exe
Resource
win10v2004-20231215-en
General
-
Target
25b196ab32e5dbba05840ccbb95ccfe6
-
Size
49KB
-
MD5
25b196ab32e5dbba05840ccbb95ccfe6
-
SHA1
9fd0741d28f8fddd1ca9ba5086b2cf27bd63c4b5
-
SHA256
e9298d722fb4e9b0b35f540715c22d30ef4566fe9665289035ec138c041ee589
-
SHA512
51d44714a6f0a505515876757c02cb2b06af349ccda88d353745ad21a1a2d657a4e807253056d28cdf374361ffb7dcec3096f865b87f5b41c101fd243ac83c69
-
SSDEEP
1536:1BNeY8gn/PmuuQERVSAVT+hNc+D4bvsNle:AYfnUQEHHVahO+B
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25b196ab32e5dbba05840ccbb95ccfe6
Files
-
25b196ab32e5dbba05840ccbb95ccfe6.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE