Behavioral task
behavioral1
Sample
21ce345bcbc32996bfeb329ba9796845.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
21ce345bcbc32996bfeb329ba9796845.exe
Resource
win10v2004-20231215-en
General
-
Target
21ce345bcbc32996bfeb329ba9796845
-
Size
2.9MB
-
MD5
21ce345bcbc32996bfeb329ba9796845
-
SHA1
495d1b9ea8145f369c038f7f4eece737cff9a1a5
-
SHA256
643644557a5395638b200c72b27190b962c44856cc24385ad9c5e434fc0c18f1
-
SHA512
86272850afc7fa9a87705fa679bd10e544204e7b3f3a934c64c7e981d49184a10e719a92f88b2744f6dc8ef4d87f0b17040e8251f4dca1faaeb7cf18f1036f2a
-
SSDEEP
49152:BUlyl5ZIfiKNtwbdEXcmdY+BAP4M338dB2IBlGuuDVUsdxxjeQZwxPYRKs:6lvqKNtSHfgg3gnl/IVUs1jePs
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21ce345bcbc32996bfeb329ba9796845
Files
-
21ce345bcbc32996bfeb329ba9796845.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 135KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE