Behavioral task
behavioral1
Sample
25448583ffb05d097110c78fddef0069ded5902c01ec5b3dea57d8cb11d917ce.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral2
Sample
25448583ffb05d097110c78fddef0069ded5902c01ec5b3dea57d8cb11d917ce.exe
Resource
win11-20240412-en
General
-
Target
25448583ffb05d097110c78fddef0069ded5902c01ec5b3dea57d8cb11d917ce
-
Size
266KB
-
MD5
86d23e77d0de44427cc44394abc7ff2d
-
SHA1
6c991fad0736998074a062c82b3d6272d6f51e97
-
SHA256
25448583ffb05d097110c78fddef0069ded5902c01ec5b3dea57d8cb11d917ce
-
SHA512
1128ad12f30124db1476145d0a389035f64394adcba21a2a3e17fd2ed5005cd271b575b651a6026ef8a963799c7365aa1a81ccf67dbc08ebbad2fd6affb52366
-
SSDEEP
6144:8XzKdNY49u8rVFJm4JhV7k1QXzF5OP01net:za4AGJm4J/7lXiP01
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource 25448583ffb05d097110c78fddef0069ded5902c01ec5b3dea57d8cb11d917ce unpack001/out.upx
Files
-
25448583ffb05d097110c78fddef0069ded5902c01ec5b3dea57d8cb11d917ce.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 368KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 163KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 327KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ