Behavioral task
behavioral1
Sample
21e38e7a68e6100f0bceb1f9074451b4.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
21e38e7a68e6100f0bceb1f9074451b4.exe
Resource
win10v2004-20231201-en
General
-
Target
21e38e7a68e6100f0bceb1f9074451b4
-
Size
804KB
-
MD5
21e38e7a68e6100f0bceb1f9074451b4
-
SHA1
eb0ca9962df54f6e76fc59eba51c6a5ed8d66b08
-
SHA256
cdd01aa49eb28210c5d6384bfe8b173de3c071fba81c36671122d417939e574c
-
SHA512
2777bbe546d4d20df1bf4dd87ae8f67ac8c71c296d46456514075bd82adee07e735ad4fceceae4d721fbe3303afbad30637a8ef389bc6a668263dea96d80263e
-
SSDEEP
12288:xODxqTXDUl9mfdomTU6oGo7dBzc256zVaBJMI2TrmTU6oGo7dBR:xOw8K1fTFoGohS256JaBWveTFoGohn
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21e38e7a68e6100f0bceb1f9074451b4
Files
-
21e38e7a68e6100f0bceb1f9074451b4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE