Behavioral task
behavioral1
Sample
21cb5b28a611ea1b4477df53f2516440.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
21cb5b28a611ea1b4477df53f2516440.exe
Resource
win10v2004-20231215-en
General
-
Target
21cb5b28a611ea1b4477df53f2516440
-
Size
335KB
-
MD5
21cb5b28a611ea1b4477df53f2516440
-
SHA1
d9d77c24b0c3d595cd61ac59b5118f5b096b5260
-
SHA256
f965a9ff8c0b75604570000d5f8c2011f816d855607e4e0ead374aebd9cf3bd0
-
SHA512
0161b7e330a5282bfc05796524b173b8232a02bf0edff78c4e78dcf132ed7e8e42587ff3fef141005179ee4af2c3a8280938a561de5b1936428491fb5accbe50
-
SSDEEP
6144:hGFnq+cVu8VyF6i3MWsn45EYXRG0HCJ35BZxAYIk8bVWXzVOK6G5mPDTuVD08:hCgut3MCFit5B/OkAiz4XG50HulV
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21cb5b28a611ea1b4477df53f2516440
Files
-
21cb5b28a611ea1b4477df53f2516440.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 24KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE