Behavioral task
behavioral1
Sample
621efddafb15c657af58c294a52741a3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
621efddafb15c657af58c294a52741a3.exe
Resource
win10v2004-20231215-en
General
-
Target
621efddafb15c657af58c294a52741a3
-
Size
102KB
-
MD5
621efddafb15c657af58c294a52741a3
-
SHA1
10a6824dd4f55dc5c45ba170dcffb1b81a8c8884
-
SHA256
e752a4e4c6bcec651f4513c572e269bf940b51d6db2fdcc402d614e919217f56
-
SHA512
afca2240acb7d5d602baa62c9c32e985e3ae36a72fa74c0356b50ae62088901aae47f67d4f4ca82a60a69cf0ffa4e802cd8f1d3ab91c80f880c863b2300756be
-
SSDEEP
1536:+TJes9HQkiU8GVfDHwQn/6NuEiqu8EbxCuEptojjGOHVbgbPR28pUgTkmWSYL:pspQkiUlb5n6usrptkG2bgjvU9mWSYL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 621efddafb15c657af58c294a52741a3
Files
-
621efddafb15c657af58c294a52741a3.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 320KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 349KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE