Behavioral task
behavioral1
Sample
25e985f14763e73784c97a6f02e7a6c6ca7224b35b097675151c165ea9eae692N.exe
Resource
win7-20240903-en
General
-
Target
25e985f14763e73784c97a6f02e7a6c6ca7224b35b097675151c165ea9eae692N.exe
-
Size
89KB
-
MD5
c16decd805397cd85743e70c8f0ebee0
-
SHA1
37200b973a0c7229983538c28eb1e7a3bab21ab6
-
SHA256
25e985f14763e73784c97a6f02e7a6c6ca7224b35b097675151c165ea9eae692
-
SHA512
86bea05f79a0b702d5d59722c6613419b8cdeae71d5942c2cabd668ece886863e1241b2c534bfbdb82655a5d4be89c4c57325bcbdf0d2daf970705bf98c0773e
-
SSDEEP
1536:f1+mFM2HXKZgixhIksu+XM5/HtAQ9Jox7a:d+4MJIkLZJNAQ9Jo9a
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25e985f14763e73784c97a6f02e7a6c6ca7224b35b097675151c165ea9eae692N.exe
Files
-
25e985f14763e73784c97a6f02e7a6c6ca7224b35b097675151c165ea9eae692N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE