Behavioral task
behavioral1
Sample
25527b2bf2f6e7cb45f5ea117cc61aab.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
25527b2bf2f6e7cb45f5ea117cc61aab.exe
Resource
win10v2004-20231222-en
General
-
Target
25527b2bf2f6e7cb45f5ea117cc61aab
-
Size
1.6MB
-
MD5
25527b2bf2f6e7cb45f5ea117cc61aab
-
SHA1
10e78ea185a6be8b30f3ea1a644e4e38e82e0337
-
SHA256
6635c9675504ad3c03edb50c9bb1b6683e2dd2409dce9cceef7177959ab32dc7
-
SHA512
1673da1018868472eac0834053e88f13ea1b03ee453e57439a9e9661178238efd9210c60f3c18b62aee613d846b933a591c0f99aea0284962ada80cb2eca70a5
-
SSDEEP
49152:tqjp7vUfl6iDEcakLz0iu36Ofl0Cv5lea9O0vMaJcakLz0O:tqjpY8OEcakcd36OfmCv5lea9O8bJcaw
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25527b2bf2f6e7cb45f5ea117cc61aab
Files
-
25527b2bf2f6e7cb45f5ea117cc61aab.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 500KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE