Behavioral task
behavioral1
Sample
razorVirus Builder.exe
Resource
win7-20240705-en
General
-
Target
razorVirus Builder.exe
-
Size
1001KB
-
MD5
b2f19e906c5b327e0f59fb3ade1c89ed
-
SHA1
f11f3d12a40c6404c025e24578e85a3166ded32d
-
SHA256
5dd327dd34ea771aa7bb6033bf8feb2768faab64d64f5466ceb13a0ba2579fdb
-
SHA512
a740a1bcd1c47d55954cb5bea0b78f5d09b05f262a72a821f63f160f5e38f6142f310c8208e22ef79f55e20d576e88b9a4e7d97dc0f62a82415db47e7cbb1b38
-
SSDEEP
24576:NH7BHa1Y5NNZhB7Q/2jOucAjGSP4zT7tz+UwLwV7qUWyw8BrP:Nb5aCJZr62jc4jP45AwFqWrP
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource razorVirus Builder.exe
Files
-
razorVirus Builder.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 620KB - Virtual size: 624KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE