Behavioral task
behavioral1
Sample
20d521c4f349238b69f89b22782aa451.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
20d521c4f349238b69f89b22782aa451.exe
Resource
win10v2004-20231215-en
General
-
Target
20d521c4f349238b69f89b22782aa451
-
Size
33KB
-
MD5
20d521c4f349238b69f89b22782aa451
-
SHA1
c2fd4c7cf07e55e3fde5489e53c67c56ece06bd0
-
SHA256
8dc945fb22004202a2135696f071a9f242cc4d1185a6e5652de46d3e00ddb824
-
SHA512
35a4a0b0d02bcee4caf28cd85595bbea4c8dfe21c831ebfc34b3db2bd8fcc3b37cb3e6561829b1ddc8267eeb42ea5971cb279aa24f833bd66c3d8cf087c4ab75
-
SSDEEP
768:Vcx9urLky4oRaJmnjaad4ATyfBXGvUYGMr2FNbuSK1TLNQKhUJb+M:VnrI6aJYjaa+ATypWsPpud1Hhg+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20d521c4f349238b69f89b22782aa451
Files
-
20d521c4f349238b69f89b22782aa451.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 164KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE