Behavioral task
behavioral1
Sample
a25222eeb3e7bcfdbeb81e78df7eb9262562963417fee0713317d8b8d293d81e.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a25222eeb3e7bcfdbeb81e78df7eb9262562963417fee0713317d8b8d293d81e.exe
Resource
win10v2004-20240802-en
General
-
Target
a25222eeb3e7bcfdbeb81e78df7eb9262562963417fee0713317d8b8d293d81e
-
Size
62KB
-
MD5
1c910e89333a6ec8327eb8a78ff47346
-
SHA1
34911015862474575a58eeecfb0b740614666d85
-
SHA256
a25222eeb3e7bcfdbeb81e78df7eb9262562963417fee0713317d8b8d293d81e
-
SHA512
dfe1c1e693242b1a8ab93bceefe7db1c2a58878c8a557f438f39c000bdf452f1d7d6e1d82f5af65b8220d31c66e4dabcbe883e016315d75b5221d7dfe394d67c
-
SSDEEP
768:V7Blpf/FAK65euBT37CPKKQSjSEXBwzEXBw3sgQw58eGkz2rcuesgQw58eGkz2rg:V7Zf/FAxTWoI7NMj
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a25222eeb3e7bcfdbeb81e78df7eb9262562963417fee0713317d8b8d293d81e
Files
-
a25222eeb3e7bcfdbeb81e78df7eb9262562963417fee0713317d8b8d293d81e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE