Behavioral task
behavioral1
Sample
421ee2049bb3d727513d8e9ce17085cd.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
421ee2049bb3d727513d8e9ce17085cd.exe
Resource
win10v2004-20231222-en
General
-
Target
421ee2049bb3d727513d8e9ce17085cd
-
Size
9KB
-
MD5
421ee2049bb3d727513d8e9ce17085cd
-
SHA1
8044f303e9132ebab5bd8d1af76553093fb33ef9
-
SHA256
3d9f53545b57ef9613810721b1854a8c87e586c5dec0cc81e3c218e2c4e06f7e
-
SHA512
22150a200e8370de20b2b2ba9e7e38ef96a3d01037c320eb7a5630c372f3b2d14afbc7d064fb52714fbac8cf7dc21cc6af01762c2804f704b1250e8f9db41fa7
-
SSDEEP
192:mDOPe2pCw3Ac79qtJPhFaNJhLkwcud2DH9VwGfct6SR:LHUwBq3vaNJawcudoD7UJR
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 421ee2049bb3d727513d8e9ce17085cd
Files
-
421ee2049bb3d727513d8e9ce17085cd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE