Behavioral task
behavioral1
Sample
lexis.exe
Resource
win11-20250313-en
General
-
Target
lexis.exe
-
Size
20.2MB
-
MD5
f9bf9c1831d7f63d427cfbc979fd1e12
-
SHA1
b7e92540d56c36d27c4ef77603d2b0d8dfdb72d1
-
SHA256
63e776333c51e644d1b6ee76f26953596446544b335d19c46db9d75b18314830
-
SHA512
b71e40ab4d1cb52a37eb70b48bd7af09a846e3f1e58b6be923d030007aa9de00f8c9a98de2f625d46653afc2e3713c0882522eeb92fcbd7d589a691c0c5273fe
-
SSDEEP
98304:TuqoOcOigmHaaDl8cCbWF7zT2b9uXFiN+bJz+VuYwhG:TGOZmHaapvCbWlCuAIbJziuYJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource lexis.exe
Files
-
lexis.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 8.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE