Behavioral task
behavioral1
Sample
02a25b0a5afd27c986592083cb44bba0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
02a25b0a5afd27c986592083cb44bba0N.exe
Resource
win10v2004-20240802-en
General
-
Target
02a25b0a5afd27c986592083cb44bba0N
-
Size
841KB
-
MD5
02a25b0a5afd27c986592083cb44bba0
-
SHA1
9e4dff485534827b5e520bc13d48897866339f97
-
SHA256
503edbfaabe12185ae1b65c0ab6adf5cc34df1757d596a9ea5eac6806162f7dd
-
SHA512
d30297b1b23c8079f9af0057f3eddedbf0dd689c6349c11dff747cf588f81d40e1661a1267e5f935e8b0c6e51f6a79f67e66f092cf87e54b7daedc7ce7c1fb01
-
SSDEEP
24576:JhV56pKEBhC8iVXrWgqAipHsceoiBX3X+W+r:PV5UPmZrAHfiBHX+WG
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02a25b0a5afd27c986592083cb44bba0N
Files
-
02a25b0a5afd27c986592083cb44bba0N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE