Behavioral task
behavioral1
Sample
21f4540e4dc7426fcdd8302e772c65fe.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
21f4540e4dc7426fcdd8302e772c65fe.exe
Resource
win10v2004-20231215-en
General
-
Target
21f4540e4dc7426fcdd8302e772c65fe
-
Size
133KB
-
MD5
21f4540e4dc7426fcdd8302e772c65fe
-
SHA1
791e1c7536ae4332069ba53ebc6e4f976dbe02e2
-
SHA256
a52a79a677aeefd43d324de03e8f8b1e91a9e461365c8de16983e0c7a140c628
-
SHA512
64c44dea4417693f5f36d6cdc94a19451fce1ad92b86904b3196e2f246e83f00897db84c1d3e13d89ab77057949bdd22165735e9cfd3a281b23270d60ceb7143
-
SSDEEP
3072:JuA52bYmcYV/t2uax4DlOO/MMc2oJhZzrtd8QRkDS9Q:JuAU0mcc/OCOOMJPzrtWQRkuQ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21f4540e4dc7426fcdd8302e772c65fe
Files
-
21f4540e4dc7426fcdd8302e772c65fe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE