Behavioral task
behavioral1
Sample
255d65372d71f5c71db0bed8b7c524d9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
255d65372d71f5c71db0bed8b7c524d9.exe
Resource
win10v2004-20231222-en
General
-
Target
255d65372d71f5c71db0bed8b7c524d9
-
Size
2.6MB
-
MD5
255d65372d71f5c71db0bed8b7c524d9
-
SHA1
b2ddbdd9adb55ccd84a0e0a5f4a62b54b45a0c65
-
SHA256
dee442aa245a25f69950b68a9dbf9e6b1475cfee95eecb5376a9e49036ea7659
-
SHA512
90ee14a9dd28004efd9a469c4f245322829db174c9527778162b1600c6f67073c20893adad17d18a43cca63c153712ed45d779935fea6f2cbbae41cf9e196a67
-
SSDEEP
49152:OhYghhP9ohAsNqUmHtogOWUYw2kvcVbOs2Jja/4l9nIay3:Odpzbb2JJA3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 255d65372d71f5c71db0bed8b7c524d9
Files
-
255d65372d71f5c71db0bed8b7c524d9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE