Behavioral task
behavioral1
Sample
a25096794212571a06c46e21c4631956.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a25096794212571a06c46e21c4631956.exe
Resource
win10v2004-20240221-en
General
-
Target
a25096794212571a06c46e21c4631956
-
Size
492KB
-
MD5
a25096794212571a06c46e21c4631956
-
SHA1
78b50603347805af0507f3d455a6025e075f22ae
-
SHA256
9781753c2f66b85a2428cd9294f29475eee42311763fe19e4b311be8d554d7ce
-
SHA512
827b4a0a375fe14edf30306e6464866e1dae9ce3c0f7280d6efc2ae597c9857043224af20cc360a62565d7dacb249603551b4e7a5dddaa3a392246a9d30e3371
-
SSDEEP
12288:xhFzvJf/d5cCdvBjK/9YmJmg0BXpMFI0RZGUX2wxWBEP1oS:Z9dSCLW/9Jb0XE9kb4WBE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a25096794212571a06c46e21c4631956
Files
-
a25096794212571a06c46e21c4631956.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 308KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 485KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE