Behavioral task
behavioral1
Sample
21ad0a9dc09d83c95d4d63054dae2256.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
21ad0a9dc09d83c95d4d63054dae2256.exe
Resource
win10v2004-20231222-en
General
-
Target
21ad0a9dc09d83c95d4d63054dae2256
-
Size
91KB
-
MD5
21ad0a9dc09d83c95d4d63054dae2256
-
SHA1
2cd0913ef806abacffe80d69d29b116d9a11fe9b
-
SHA256
911932fc40521922ad37f079cddb2d484709f417c22556d7f54fb88c2a32b164
-
SHA512
8e976c43081b0a088da8378991926853d68dd9c90891fca6c55bd7e11ddf76f484435fc3221a4158baa69f0ec0c5590fc2c726bb1ffa34f018327aac09a718d6
-
SSDEEP
1536:s9Z3KcR4mjD9r8226++EC9KhXt6/QPDGdWlhTTPSxaHrDco5JEpsTBehutBk:sr3KcWmjRrzS12KvbG8PSCr4eo0+utBk
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21ad0a9dc09d83c95d4d63054dae2256
Files
-
21ad0a9dc09d83c95d4d63054dae2256.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE