Behavioral task
behavioral1
Sample
25a5afdaa876cdd0fdd6b9988ed8dcfef8b74d74414f2ef8b4f7c3ac0b9b2cac.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
25a5afdaa876cdd0fdd6b9988ed8dcfef8b74d74414f2ef8b4f7c3ac0b9b2cac.exe
Resource
win10v2004-20240704-en
General
-
Target
25a5afdaa876cdd0fdd6b9988ed8dcfef8b74d74414f2ef8b4f7c3ac0b9b2cac
-
Size
91KB
-
MD5
df2a40ccd36c29bfe53d22a1ee654222
-
SHA1
8c83efc8a0324d44dc533476af3baec4ceb55247
-
SHA256
25a5afdaa876cdd0fdd6b9988ed8dcfef8b74d74414f2ef8b4f7c3ac0b9b2cac
-
SHA512
889e69086afbb30a1875ea38b45dbe370b465a87ba6a2e043ebb89169b3a8bed399ef74e9be5c0868c6aa489c320eac0f8a68d5329602dbd5ba3ceb087634394
-
SSDEEP
1536:XRsjdLaslqdBXvTUL0Hnouy8VjnRsjdLaslqdBXvTUL0Hnouy8Vje:XOJKqsout9nOJKqsout9e
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25a5afdaa876cdd0fdd6b9988ed8dcfef8b74d74414f2ef8b4f7c3ac0b9b2cac
Files
-
25a5afdaa876cdd0fdd6b9988ed8dcfef8b74d74414f2ef8b4f7c3ac0b9b2cac.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 140KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE