Behavioral task
behavioral1
Sample
21a1955601e66ed5f4ae1c95bb7f9d1c.exe
Resource
win7-20231215-en
General
-
Target
21a1955601e66ed5f4ae1c95bb7f9d1c
-
Size
23KB
-
MD5
21a1955601e66ed5f4ae1c95bb7f9d1c
-
SHA1
d29969832c72d88a8cef6aa358cb7af15ec8fb86
-
SHA256
e3092b78791a4d8336561b1c5512af7138622f97cb566208ff2528f896842620
-
SHA512
aaf45bca574fb4d49d08c5f736758c408d846fa33c07556af7fd377af5f4a0d9de886662925f042c9ae31770d19c197bb11c9936d3c282d6901c2c5be645db45
-
SSDEEP
384:xIiV728hUQ7Y2P/cVEccDdye7kjlWLe7grPiA8jyrMPhTjanbBoZcA5ONOkXD8SB:xRGuY2P0Vo6r7SiAwyrMRjbJ5gZanbce
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21a1955601e66ed5f4ae1c95bb7f9d1c
Files
-
21a1955601e66ed5f4ae1c95bb7f9d1c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE