Behavioral task
behavioral1
Sample
xxx_video.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
xxx_video.exe
Resource
win10v2004-20231215-en
General
-
Target
25178429a8b0e53b576b6d837f99b3ac
-
Size
44KB
-
MD5
25178429a8b0e53b576b6d837f99b3ac
-
SHA1
3086df0f994105c3600b028fdc810817dcd4369a
-
SHA256
3df8070e34252ec579ff7b3ba757c6c2e33a49d55e0f2a32b447647422f8f758
-
SHA512
482fb3cacb49bac508af70fb62020e0ca9b7adb63e39140170894010f0cb60050e1468d9eb9c03dafbb4ebe2bc8a0a7fd226f369ab2a9f8af81adbb249227977
-
SSDEEP
768:7+Grm90JSnt4XAcb3WqUhQPjvrr//YY0X3kW/h1o88+dNgrHNu7voRljrc:quStkAlqIQ/zvC0W4CdNgrNuroTrc
Malware Config
Signatures
-
resource yara_rule static1/unpack001/xxx_video.exe upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/xxx_video.exe
Files
-
25178429a8b0e53b576b6d837f99b3ac.rar
-
xxx_video.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 264KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE