Behavioral task
behavioral1
Sample
21702668e0de0592920ac2dd6335f73b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
21702668e0de0592920ac2dd6335f73b.exe
Resource
win10v2004-20231215-en
General
-
Target
21702668e0de0592920ac2dd6335f73b
-
Size
605KB
-
MD5
21702668e0de0592920ac2dd6335f73b
-
SHA1
1a27a45ac2c5193c5a9bdcba086f09497d22a7bb
-
SHA256
1a16f365e20521da7acf6b47a7c36ec0b527d2025616b0d02f4d6d683065ad56
-
SHA512
10233d6a6f0850ef8d369be82f4d0c41b8a359ff076195a6b9682984e0b848d4f927175a94169ca8cf0701c1a632440959545537ad37d323282beaa971b36d51
-
SSDEEP
12288:OCsK4zPZ9E8LKOYG2m59633F6OASkxr2m:OCsdzR91KO9xvK673
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21702668e0de0592920ac2dd6335f73b
Files
-
21702668e0de0592920ac2dd6335f73b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 195KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE