Behavioral task
behavioral1
Sample
21b9c816cef820e49e9ffdb461ffbca6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
21b9c816cef820e49e9ffdb461ffbca6.exe
Resource
win10v2004-20231215-en
General
-
Target
21b9c816cef820e49e9ffdb461ffbca6
-
Size
1.8MB
-
MD5
21b9c816cef820e49e9ffdb461ffbca6
-
SHA1
2a563a43b1ee4e2cdc0bc6bd4e86ec520041f084
-
SHA256
f25cb27ea8af1c29fb9a6364cad2ee12b959c0a070339756f1ce90d7d1c38547
-
SHA512
51d0af994ee9bd4812e8bebe1303f7a5ea341d872fda2b9e06b1872a146b8dbcc28320d65c4b0a8f47b3ddf8a33dcd019d819f192c6e483e2ec6a6067129942d
-
SSDEEP
24576:S6pQPxQ2JyP2r5mJV91xM7RpbwgIvs7Nxqv:SCqm2Jpr0nNM7Dus7Nxu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21b9c816cef820e49e9ffdb461ffbca6
Files
-
21b9c816cef820e49e9ffdb461ffbca6.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 616KB - Virtual size: 620KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE