Behavioral task
behavioral1
Sample
16721c9bebe327c76cc8fcec21be8aac.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
16721c9bebe327c76cc8fcec21be8aac.exe
Resource
win10v2004-20231215-en
General
-
Target
16721c9bebe327c76cc8fcec21be8aac
-
Size
341KB
-
MD5
16721c9bebe327c76cc8fcec21be8aac
-
SHA1
1fd19867351b2a49bb2e53a0f97f540eb456aa0a
-
SHA256
7d68398b4093adce492e666350d2d44cad93316b085528f27c5a2cf5989180dd
-
SHA512
8933361319b54e366da178d9b13b9bbd9cfec7a78b0cd58da68c6184e338113fd6c50f3d257d978fff149021179f3461dada09ae5bc5c119e62dc786eaaf525b
-
SSDEEP
6144:/TocJqgND+1azHg/EvV6wwA7LaztTXub0O8rXBqUkEkYkUJeKDGUXiMutSrL:/0gqnazHgcvVO8Laz1Y8rXAJYkMeEp3
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16721c9bebe327c76cc8fcec21be8aac
Files
-
16721c9bebe327c76cc8fcec21be8aac.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE